Overzicht van binnengekomen advisories.
2186 resultaten gevonden
A server-side request forgery (SSRF) vulnerability has been identified in the light0011 CMS project at specific commits. The flaw resides in the catchimage function within Public/ueditor/php/controller.php, part of the UEditor component. An attacker can manipulate the source[] argument to trigger SSRF remotely. A public exploit is available, increasing the risk of active exploitation. The product follows a rolling release model, making specific version tracking difficult. The project maintainer was notified via a GitHub issue but has not responded. No patch or mitigation has been issued at the time of disclosure.
Bekijk origineel advisory →A missing authentication vulnerability has been identified in ramon-victor freegpt-webui up to commit 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. The vulnerability resides in the _conversation function within server/backend.py, part of the Backend Conversation API component. Manipulation of the 'model' argument allows bypassing authentication entirely. The attack can be launched remotely without user interaction. A public exploit has been disclosed and is available for use. The product follows a rolling release model, meaning no specific version numbers are available for affected or patched releases. The maintainer no longer supports this product, leaving users without an official fix. The vulnerability has been catalogued in VulDB and NVD databases.
Bekijk origineel advisory →Trigger.dev versions prior to 4.5.2 contain a vulnerability where environment membership is not validated during run replay operations. Authenticated attackers can exploit this flaw to inject task runs into arbitrary environments belonging to other organizations or projects. This allows attackers to consume victim resources and pollute run history without authorization. The vulnerability affects the multi-tenant isolation model of the platform. A fix was released in version 4.5.2 with a corresponding commit and security advisory. The issue was tracked and disclosed via GitHub issues and a security advisory under GHSA-qxpp-qjg8-x4jv. VulnCheck also published an advisory detailing the unauthorized environment access vector. Users are strongly advised to upgrade to version 4.5.2 or later immediately.
Bekijk origineel advisory →SmartIT Desktop Manager, developed by Lightstar, contains a Use of Hard-coded Credentials vulnerability identified as CVE-2026-85146. The flaw allows unauthenticated remote attackers to extract SSH service account credentials and passwords for the SmartIT Agent directly from the application source code. No authentication is required to exploit this vulnerability, making it particularly dangerous. The exposure of hard-coded credentials in source code represents a critical security risk, as attackers can gain unauthorized SSH access to managed systems. This vulnerability is catalogued by both NVD (NIST) and TWCERT, indicating formal recognition by cybersecurity authorities. The impact is rated High, as successful exploitation could lead to full compromise of systems managed by the SmartIT Agent. Organizations using SmartIT Desktop Manager by Lightstar should apply patches or mitigations immediately and rotate any exposed credentials.
Bekijk origineel advisory →CVE-2026-85623 affects goose version 1.37.0, an AI agent tool, which executes arbitrary shell commands embedded in recipe stdio extensions and retry.checks configurations without adequate security inspection. Attackers can craft and distribute malicious recipes that silently execute shell commands with the privileges of the user running goose. The vulnerability exists because the recipe security scan does not inspect extension or retry configuration sections, allowing malicious payloads to bypass the existing security controls. This could lead to full host compromise if a user runs a malicious recipe. The issue has been documented in the goose GitHub repository and tracked by VulnCheck. A fix appears to be available in later versions of the codebase as referenced by v1.49.0 source links. Users are advised to update to a patched version and avoid running untrusted recipes.
Bekijk origineel advisory →A critical arbitrary command execution vulnerability exists in aider (aider-chat), an AI-powered coding assistant. The tool automatically loads a .aider.conf.yml configuration file from the root of any git repository it is launched in. An attacker can craft a malicious repository with test-cmd or lint-cmd directives that execute arbitrary shell commands via subprocess with shell=True. These commands run without any user confirmation, LLM interaction, or API key requirement. A victim simply needs to clone and run aider inside the attacker-controlled repository to trigger code execution. The vulnerability is long-standing and was confirmed on version 0.86.3.dev. This represents a significant supply chain and developer tooling risk, especially given the growing adoption of AI coding assistants.
Bekijk origineel advisory →LaVague version 0.2.35 contains a critical remote code execution vulnerability in the PythonFromMarkdownExtractor.extract_as_object method. The vulnerability arises from the unsafe evaluation of untrusted language model output that is derived from web page content. Attackers can exploit this flaw through indirect prompt injection by embedding malicious Python code within web pages visited by the LaVague agent. When the LLM processes the malicious web content, the injected code is passed to an eval() call without sanitization or human review. This allows attackers to execute arbitrary code on the operator's host system. The attack requires no direct access to the target system, making it particularly dangerous for automated AI agent workflows. The vulnerability is tracked as CVE-2026-85694 and affects the lavague-core component of the LaVague framework.
Bekijk origineel advisory →Voltronic Power SNMP Web Pro version 1.1 contains a critical unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint. Remote attackers can exploit this flaw without any valid credentials by uploading a specially crafted tar archive to the vulnerable endpoint. The malicious tar archive contains arbitrary executable files that are extracted into a privileged directory on the target system. Once extracted, these files are executed with root privileges, resulting in full system compromise. The vulnerability requires no authentication, significantly lowering the barrier for exploitation. This affects UPS and power management infrastructure, placing it in the critical infrastructure risk category. A proof-of-concept exploit is publicly available on GitHub, increasing the likelihood of active exploitation in the wild.
Bekijk origineel advisory →FastChat, an open-source LLM serving framework, contains a critical authentication bypass vulnerability in its /register_worker endpoint. Unauthenticated attackers can exploit this flaw to register arbitrary worker addresses without any authentication. The vulnerability enables server-side request forgery (SSRF) by allowing attackers to register malicious workers under legitimate victim model names. This facilitates interception of sensitive user data including prompts, images, and model responses. Attackers can also leverage the vulnerability to probe and scan internal network ports across the worker mesh infrastructure. The issue is present in at least version v0.2.36 of FastChat as referenced in the controller.py source file. The vulnerability poses significant risks to AI/ML deployments using FastChat for model serving, potentially exposing confidential user interactions and internal network topology.
Bekijk origineel advisory →A stack-based buffer overflow vulnerability has been identified in FreeIPMI versions prior to 1.6.19. The flaw exists in the ipmi-oem component, specifically within the _output_dell_system_info_cmc_info function located in ipmi-oem/ipmi-oem-dell.c. The vulnerability is triggered via the cmc-info subcommand of the dell get-system-info operation. Stack-based buffer overflows can potentially allow attackers to execute arbitrary code or cause a denial of service. The vulnerability has been assigned CVE-2026-85507 and is tracked by NVD. A patched version, FreeIPMI 1.6.19, has been released and is available via the GNU FTP server. The issue was disclosed on the oss-security mailing list in August 2026. Users are advised to upgrade to FreeIPMI 1.6.19 or later to mitigate the risk.
Bekijk origineel advisory →The ACPT (Premium) plugin for WordPress contains a critical privilege escalation vulnerability affecting all versions up to and including 2.0.66. The flaw resides in the submit() function, which lacks proper authorization checks, allowing unauthenticated attackers to manipulate the target user ID in form submissions. By exploiting this, an attacker can overwrite any WordPress user's email address and password, including administrator accounts, effectively taking full control. Exploitation is possible when a public ACPT user form that permits anonymous submissions is present on the site. This vulnerability enables complete account takeover without any prior authentication. The issue has been documented by both NVD and Wordfence threat intelligence. Site administrators are urged to update beyond version 2.0.66 immediately to mitigate risk.
Bekijk origineel advisory →A SQL injection vulnerability has been identified in the light0011 CMS project at specific commits. The flaw resides in the ChapterModel::searchChapter function within App/Home/Controller/ChapterController.class.php, where the 'content' argument is not properly sanitized by the Query Builder component. Remote attackers can exploit this vulnerability without authentication. A public exploit has been released, increasing the risk of active exploitation. The product does not follow versioning, making it impossible to identify affected or unaffected releases. The project maintainer was notified via a GitHub issue but has not responded. This vulnerability poses a significant risk to any deployments of this CMS.
Bekijk origineel advisory →A SQL injection vulnerability has been identified in the light0011 CMS at specific commit hashes (c774dce31c6df0055568a8d5c53d964d99be199d and f72cf46f601efb2a0618c3814cc2f61380b38930). The flaw resides in the ChapterModel::searchChapter function within App/Home/Controller/ChapterController.class.php, specifically in the Query Builder component. Attackers can manipulate the 'content' argument to perform SQL injection attacks remotely. A public exploit has already been released, increasing the risk of active exploitation. The product does not use versioning, making it impossible to identify specific affected or unaffected releases. The project maintainer was notified via a GitHub issue report but has not yet responded. This vulnerability poses a significant risk to any deployment of this CMS.
Bekijk origineel advisory →The Divi Ajax Filter plugin for WordPress contains a Local File Inclusion (LFI) vulnerability affecting all versions up to and including 5.1.2. The flaw exists in the 'custom_loop_template' parameter and allows unauthenticated attackers to include and execute arbitrary PHP files on the server. Successful exploitation can lead to access control bypass, sensitive data exposure, or full remote code execution if PHP files can be uploaded. The vulnerability is conditionally exploitable only when the 'loop_templates' parameter is set to 'custom-template'. No authentication is required, making this a significant risk for any WordPress site running the affected plugin versions. A patch or updated version is expected as referenced in the Divi Engine changelog. The issue has been documented by both NVD and Wordfence threat intelligence.
Bekijk origineel advisory →FreeIPMI versions before 1.6.19 contain a stack-based buffer overflow vulnerability in the function _ipmi_sel_oem_fujitsu_get_sel_entry_long_text located in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c. The vulnerability is triggered via malformed Fujitsu SEL long-text responses, which can cause memory corruption on the stack. This could potentially allow an attacker to execute arbitrary code or crash the affected application. The issue specifically affects systems using Fujitsu iRMC OEM SEL entries. A fix has been released in FreeIPMI version 1.6.19. Users are advised to update to the patched version immediately. The vulnerability was disclosed via the oss-security mailing list and the fix is available via the official GNU FTP server.
Bekijk origineel advisory →Aim version 3.29.1's remote tracking server contains a critical authentication bypass vulnerability. The server fails to authenticate incoming requests and dispatches arbitrary methods via Python's getattr without any allowlist validation. Unauthenticated attackers can exploit this flaw to register clients, instantiate Repo resources, and invoke arbitrary methods on the server. This allows attackers to read experiment data or delete runs without any credentials. The vulnerability resides in the transport layer components, specifically server.py and tracking.py. The issue has been documented in the Aim GitHub repository and reported via VulnCheck advisories. This represents a significant risk for any organization exposing the Aim remote tracking server to untrusted networks.
Bekijk origineel advisory →Blinko version 1.8.7 contains an Insecure Direct Object Reference (IDOR) vulnerability affecting multiple tRPC procedures including message.list, message.update, message.delete, message.clearAfter, and conversation.clearMessages. While these endpoints require authentication, they fail to verify that the requested resource belongs to the authenticated user, instead trusting caller-supplied conversation or message IDs directly. An attacker with a valid account can exploit this by enumerating sequential integer IDs to access, modify, or delete other users' AI chat histories and conversations. The vulnerability exposes sensitive user data and allows unauthorized data manipulation across user boundaries. The issue was identified in server/routerTrpc/message.ts and server/routerTrpc/conversation.ts source files. A fix appears to have been introduced in version 1.8.8 based on the patched file references in GitHub.
Bekijk origineel advisory →A SQL injection vulnerability has been identified in code-projects Doctor Appointment System version 1.0. The flaw exists in the /contactus.php file, where manipulation of the 'firstname' argument allows SQL injection attacks. The vulnerability can be exploited remotely without requiring local access. A public exploit has already been published and is available for use by threat actors. This makes the vulnerability particularly dangerous as it lowers the bar for exploitation. The affected product is a web-based doctor appointment scheduling system. Organizations using this software should apply patches or mitigations immediately given the public availability of the exploit.
Bekijk origineel advisory →Plandex version 2.2.1 contains a path traversal vulnerability in the ApplyFiles function that allows attackers to write files outside the intended project directory. The flaw can be exploited by influencing AI model output through poisoned repository files or attacker-controlled context inputs. Successful exploitation enables writing to arbitrary locations such as shell rc files or cron job configurations. This can lead to arbitrary code execution on the affected system. The vulnerability is tracked as CVE-2026-85690 and has been documented by VulnCheck. The affected code resides in app/cli/lib/apply.go within the Plandex CLI. The issue has been reported via GitHub and is publicly disclosed. Users of Plandex 2.2.1 are advised to review available patches or mitigations immediately.
Bekijk origineel advisory →CVE-2026-85608 affects Douyin_TikTok_Download_API through version 4.1.2, exposing a server-side request forgery (SSRF) vulnerability in two endpoints: /api/download and /api/hybrid/video_data. Unauthenticated attackers can exploit this flaw by supplying an arbitrary URL via the 'url' query parameter, causing the server to fetch the specified resource on their behalf. This allows attackers to reach internal services, including cloud metadata endpoints such as AWS IMDSv1, which can expose sensitive credentials and configuration data. Sensitive information can be leaked through error messages returned in the response body. No authentication is required to exploit this vulnerability, significantly increasing its risk surface. The affected code is identified in the crawlers/douyin/web/utils.py file in the repository. The vulnerability is documented in the project's GitHub issue tracker and in a VulnCheck advisory. Organizations using this API in cloud-hosted or internally networked environments are particularly at risk.
Bekijk origineel advisory →