AppArmor DoS

The vulnerability of the apparmor component in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

AppArmor DoS

The vulnerability of the apparmor component in the Linux operating system’s kernel is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel match_char Data Compromise

The vulnerability of the matchchar function in the Linux operating system’s kernel involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

One-Time Password Handler Component Disclosure

The vulnerability of the One-Time Password Handler component in the mobile application for managing internet services, the my Excitel App, is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclo...

OWASP Coraza WAF Name Reference

The vulnerability of the Web application firewall library OWASP Coraza WAF is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

IntelliJ IDEA Symbolic Link Unauthorized Access

The vulnerability of the IntelliJ IDEA integrated development environment is related to the incorrect definition of symbolic links during file access. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Windows WLAN Host system

The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow an attacker to cause memory corruption...

SICK TDC-X401GL Access Control Compromise

The vulnerability of the SICK TDC-X401GL industrial controller’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to compromise the accessibility of protected information...

Zimbra Collaboration Suite LDAP Injection Unauthorized Access

The vulnerability of the Zimbra Collaboration Suite email management system is related to the failure to take measures to neutralize special elements in the LDAP request. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Zimbra Collaboration Suite XSS

The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

FortiSOAR Unauthorized Access

The vulnerability of the graphical user interface of the software solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR is related to insufficient validation of requests on the server side. Exploiting this vulnerabilit...

Keras Model Code Execution

The vulnerability of the Model.loadmodel function in the Keras library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

LibreChat DoS

The vulnerability of the LibreChat artificial intelligence-based platform is related to an error in processing exceptional states at the final endpoint /api/convos. Exploiting this vulnerability could allow a malicious actor to cause service failures...

LibreChat Log Data Access

The vulnerability of the LibreChat artificial intelligence-based platform is related to deficiencies in the mechanism for processing input data that is recorded in system logs. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify data in the log files...

AI agent OpenClaw Bypass Security

The vulnerability in the src/auto-reply/reply/commands-approve.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms...

Google Chrome Microsoft Edge Data Compromise

The vulnerability of the Printing component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Chromoting Remote Privilege Escalation

The vulnerability of the Chromoting remote administration tool, which is used by browsers such as Google Chrome and Microsoft Edge, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges through a malicious file...

Payments Component Manipulate URL Bar

The vulnerability of the Payments component in Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to forge the URL input by using a specially created HTML page...

Audio component Google Chrome Microsoft Edge Code Execution

The vulnerability of the Audio component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted HTML page...

AdFilter Component Code Execution

The vulnerability of the AdFilter component in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...

DevTools Component Unauthorized Access

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

WebRTC Component Code Execution

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code through a specially created HTML page...

Google Chrome Microsoft Edge Code Execution

The vulnerability of the user interface of Google Chrome and Microsoft Edge is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

iHead: Logs Module Code Execution

Vulnerability of the “iHead: Logs” module in the Content Management System CMS of 1C-Bitrix: Website management is related to the failure to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code remotely...

command-line interface of the Code Execution

The vulnerability of the command-line interface of the Cisco Catalyst SD-WAN Manager is related to incorrect encoding or filtering of output data. Exploiting this vulnerability allows an attacker to execute arbitrary code and elevate their privileges to the root level...

D-Link DWR-M920 Router Code Execution

The vulnerability of the sub41C8E8 function in D-Link DWR-M920 router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the actionvalue parameter. Exploiting this vulnerability can allow a remote attacker to execute arbitrary cod...

SolarWinds Serv-U Resource Consumption DoS

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending a specially crafted POST request...

radare2-mcp Server Code Execution

The vulnerability of the r2cmdstr function in the radare2-mcp server is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

LibreChat API Endpoint Data Compromise

The vulnerability of the API Endpoint component of the LibreChat artificial intelligence-based platform is related to a violation of expected behavior. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected information...

AppArmor DoS

The vulnerability of the apparmor component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Qualcomm DSP service Disclosure

The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to disclose protected information...

Qualcomm embedded firmware DoS

The vulnerability of WLAN microprogramming software’s firmware in Qualcomm embedded chips relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause system failures remotely...

Qualcomm WLAN HAL DoS

The vulnerability of the WLAN HAL microprogramming system component in Qualcomm’s embedded chips relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Qualcomm Camera Component Data Compromise

The vulnerability of the Camera component in the microprogramming software of Qualcomm-internal chips is related to unreliable pointer assignment. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

Qualcomm Embedded Software Pointer Assignment

The vulnerability of embedded software in Qualcomm chips relates to unreliable pointer handling. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Zimbra Collaboration Suite XXE

The vulnerability of the Zimbra Collaboration Suite email management system is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...

Zimbra Collaboration Suite Data Compromise

The vulnerability of the Zimbra Collaboration Suite email management system is related to the of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Ollama auth Bypass

The vulnerability of the server.auth.getAuthorizationToken function in the Ollama system for running and managing large language models is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures...

LibreChat Access Control JWT

The vulnerability of the LibreChat artificial intelligence-based platform is related to deficiencies in access control when processing JWT tokens. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...

Agent Zero SSRF

The vulnerability of the handlepdfdocument function in the framework for creating AI agents like Agent Zero is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute an SSRF attack...

Tlon plugin SSRF

The vulnerability of the Tlon plugin Urbit, which is part of the AI agent OpenClaw previously known as ClawdBot or MoltBot, stems from insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...

tunnel.allowNgrokFreeTierLoopbackBypass Parameter Compromise

The vulnerability of the tunnel.allowNgrokFreeTierLoopbackBypass parameter is related to the AI agent OpenClaw previously ClawdBot or MoltBot. This vulnerability stems from the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to...

Firefox Thunderbird Buffer Overflow

The vulnerability in the Firefox web browser and the Thunderbird email client relates to the escape of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Cast Component Privilege Escalation

The vulnerability of the Cast component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...

DevTools Component UI Replacement

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface using a specially created Chrome extension...

Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of the search function in Google Chrome and Microsoft Edge is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML page...

Media component Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created...

WebApp Component UI Replacement

The vulnerability of the WebApp component of Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

MHTML Component Unauthorized Access

The vulnerability of the MHTML component in Google Chrome and Microsoft Edge is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

SOGo Contact Search Code Execution

The vulnerability of the contact search component in the SOGo collaborative work software is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain unauthorized access to protected information...