5203 matches found
EUVD-2026-89363
bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. This vulnerability allows attackers to access sensitive databse information via a crafted SQL statement...
CVE-2026-79536
bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. This vulnerability allows attackers to access sensitive databse information via a crafted SQL statement...
CVE-2026-79536
bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. This vulnerability allows attackers to access sensitive databse information via a crafted SQL statement...
CVE-2026-79536
The bytebase dbhub v1.2.0 software contains a SQL injection vulnerability within the /utils/sql-parser.ts component. An attacker can exploit this flaw by submitting a crafted SQL statement to gain unauthorized access to sensitive database information . No specific remediation steps or exploit det...
CVE-2026-79536: Improper Neutralization of Special Elements used in an SQL Command
bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. This vulnerability allows attackers to access sensitive databse information via a crafted SQL statement...
Amazon Linux 2 : amazon-efs-utils (ALAS-2026-3948)
The version of amazon-efs-utils installed on the remote host is prior to 3.3.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3948 advisory. RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-ti...
CVE-2026-85738 TREK: SSRF Guard Bypass via IPv6 Transition Addresses (NAT64/6to4)
TREK is a collaborative travel planner. Prior to 3.4.0, the checkSsrf logic in server/src/utils/ssrfGuard.ts does not recognize NAT64, 6to4, or Teredo IPv6 transition addresses that encode an IPv4 destination. An authenticated user who controls a DNS record can supply a URL whose AAAA result is a...
CVE-2026-85738
The collaborative travel planner TREK (prior to version 3.4.0 ) is vulnerable to a Server-Side Request Forgery (SSRF) due to a flaw in the checkSsrf logic located in server/src/utils/ssrfGuard.ts. The application fails to recognize NAT64, 6to4, or Teredo IPv6 transition addresses that encode an I...
CVE-2026-79762
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, Termix derives the keys that wrap OIDC and WebAuthn users' Data Encryption Keys from committed default strings and the public userId salt in...
CVE-2026-79762 Termix: Hardcoded default key encrypts all OIDC/WebAuthn users' stored SSH credentials — full offline decryption from a database copy
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, Termix derives the keys that wrap OIDC and WebAuthn users' Data Encryption Keys from committed default strings and the public userId salt in...
CVE-2026-79762 Termix: Hardcoded default key encrypts all OIDC/WebAuthn users' stored SSH credentials — full offline decryption from a database copy
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, Termix derives the keys that wrap OIDC and WebAuthn users' Data Encryption Keys from committed default strings and the public userId salt in...
CVE-2026-79762
The Termix web-based server management platform (versions 1.7.0 to 2.5.1 ) is vulnerable to credential decryption due to hardcoded default keys. In src/backend/utils/user-crypto.ts, the system derives wrapping keys for OIDC and WebAuthn users' Data Encryption Keys (DEKs) from committed default st...
CVE-2026-79760
The web-based server management platform Termix versions 2.5.0 through 2.5.1 is vulnerable to an authenticated blind SSRF via the notification channel test endpoint. The root cause is a lack of destination allowlisting or private-address blocking in src/backend/database/routes/alert-rules-routes....
CVE-2026-79762: Use of Hard-coded Cryptographic Key
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, Termix derives the keys that wrap OIDC and WebAuthn users' Data Encryption Keys from committed default strings and the public userId salt in...
PT-2026-97920
Name of the Vulnerable Software and Affected Versions Termix versions 1.7.0 through 2.5.0 Description Termix derives keys used to wrap Data Encryption Keys DEK for OIDC and WebAuthn users from committed default strings and the public userId salt within the src/backend/utils/user-crypto.ts file...
MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions
Summary When OAuth tokens are saved, MCP Atlassian always writes a plaintext fallback copy under /.mcp-atlassian/oauth-.json. The fallback file is created with the process default umask rather than restrictive permissions. In this environment the file was created as mode 0664, exposing access and...
MCP Atlassian: Insecure File Permissions on OAuth Token Storage
Summary The OAuth token fallback file storage in OAuthConfig.savetokenstofile creates token files containing access tokens, refresh tokens, and cloud IDs with default filesystem permissions typically 0644 on Linux, world-readable. Any local user on a shared system can read these files to obtain...
Malicious code in zeal-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a4b9b4fcb0a48aa3602fc7bc865eff738f8ab42a4c9e56ea31e70b0b6b826f canary.js in [email protected] collects host reconnaissance data os.hostname, os.userInfo, process.platform, cwd, node version and POSTs it to the...
MAL-2026-16542 Malicious code in zeal-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a4b9b4fcb0a48aa3602fc7bc865eff738f8ab42a4c9e56ea31e70b0b6b826f canary.js in [email protected] collects host reconnaissance data os.hostname, os.userInfo, process.platform, cwd, node version and POSTs it to the...