Publikacje w kolejności czasu

A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password. This issue affects Apache Tomcat: from 11.0.0-M1 through…

CVSS 9,1 · EPSS 0,65 % · rekomendacja wg zapisanej polityki

In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not verify the bearer JWT. The payload is decoded and its groups or roles are used as RBAC subjects. A self-minted token whose groups contain admin matches the built-in admin role,…

CVSS 9,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of the file /cgi-bin/mainfunction.cgi of the component CGI Interface. This manipulation of the argument usefile/usescript/option causes os command injection. Remote exploitation of…

CVSS 9,9 · EPSS 2,14 % · rekomendacja wg zapisanej polityki

A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image into a pod whose ServiceAccount is bound via ClusterRoleBinding to a ClusterRole granting cluster-wide get/list/watch on…

CVSS 9,9 · EPSS 0,34 % · rekomendacja wg zapisanej polityki

Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 through 8.36.1-hotfix.0, on on-premises and cloud deployments, allows an authenticated remote attacker to read and change configuration properties of entities they aren't…

CVSS 9,3 · EPSS 0,36 % · rekomendacja wg zapisanej polityki

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.

CVSS 9,2 · EPSS 0,31 % · rekomendacja wg zapisanej polityki

A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

CVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki

A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.

CVSS 9,2 · EPSS 0,34 % · rekomendacja wg zapisanej polityki

A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

CVSS 9,3 · EPSS 0,62 % · rekomendacja wg zapisanej polityki

In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call (with its audio and perhaps also video track) down.

CVSS 9,3 · EPSS 0,32 % · rekomendacja wg zapisanej polityki

Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can execute arbitrary Python via POST…

CVSS 9,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki

Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request naming the shell tool to execute arbitrary OS commands as the…

CVSS 9,3 · EPSS 0,52 % · rekomendacja wg zapisanej polityki

DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's…

CVSS 9,3 · EPSS 0,64 % · rekomendacja wg zapisanej polityki

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet network can authenticate as root@% to gain full database…

CVSS 9,3 · EPSS 0,35 % · rekomendacja wg zapisanej polityki

piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stream endpoints lack authentication. Attackers can instruct the agent to call the exec_shell tool, which runs arbitrary commands via subprocess.run without human…

CVSS 9,3 · EPSS 0,69 % · rekomendacja wg zapisanej polityki

A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was…

CVSS 9,9 · EPSS 1,69 % · rekomendacja wg zapisanej polityki

Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a…

CVSS 9,2 · EPSS 0,43 % · rekomendacja wg zapisanej polityki

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding selects raw mode LA with two bytes per pixel, while an unrecognized JPEG mode can be decoded as JCS_UNKNOWN with four…

CVSS 9,2 · EPSS 0,32 % · rekomendacja wg zapisanej polityki

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3…

CVSS 9,2 · EPSS 0,32 % · rekomendacja wg zapisanej polityki

Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data through libtiff to a target without a usable fileno(), such as BytesIO. The callback sizes its allocation from the prior…

CVSS 9,2 · EPSS 0,53 % · rekomendacja wg zapisanej polityki

Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the unauthenticated GET /api/v1/translations/{lang} endpoint, and 1.0.16 before 1.0.42 fails to check target and destination page rules in the sync and batch copy…

CVSS 9,3 · EPSS 0,32 % · rekomendacja wg zapisanej polityki

Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-scoped GraphQL tokens to mutate other sites' content because requireAllowedSite() is not enforced. Attackers holding a site-A token can create entries in site B via supplied siteId and delete…

CVSS 9,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST…

CVSS 9,2 · EPSS 0,61 % · rekomendacja wg zapisanej polityki

CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to relay valid Evidence from a genuine attester. Attackers holding an extracted attested TLS private key can forward the relying party's nonce to a genuine…

CVSS 9,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki

Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packages downloaded or updated between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:12 UTC. Rank Math states that the affected plugin files contained malware that could compromise a…

CVSS 9,8 · EPSS 0,72 % · rekomendacja wg zapisanej polityki