🕵️ RESEARCH & DEEP DIVES
wger before 2.6 CSV Formula Injection via member exportwger before 2.6 fails ... — CVE ThreatInt
wger before 2.6 Open Redirect via trainer-login next parameterwger before 2.6... — CVE ThreatInt
wger before 2.5 Uncontrolled Resource Consumption via date_sequencewger befor... — CVE ThreatInt
wger Incomplete Authorization Fix Cross-Tenant Account Deletionwger versions ... — CVE ThreatInt
h3 before 1.15.6 Path Traversal via Percent-Encoded Dot Segmentsh3 (npm packa... — CVE ThreatInt
h3 before 1.15.9 SSE Event Injection via Carriage Returnh3 versions before 1.... — CVE ThreatInt
h3 before 1.15.9 Path Traversal via Double Decodingh3 versions before 1.15.9 ... — CVE ThreatInt
h3 before 2.0.1-rc.18 Denial of Service via Unbounded Chunked Cookieh3 versio... — CVE ThreatInt
h3 before 2.0.1-rc.18 Open Redirect via redirectBack()h3 versions before 2.0.... — CVE ThreatInt
PocketMine-MP before 4.7.2 Denial of Service via Skin GeometryPocketMine-MP b... — CVE ThreatInt
PocketMine-MP before 4.12.3 Denial of Service via Unauthenticated SessionsPoc... — CVE ThreatInt
PocketMine-MP before 3.18.1 Denial of Service via MovePlayerPacketPocketMine-... — CVE ThreatInt
PocketMine-MP before 4.0.3 Operator Privilege Escalation via Case Sensitivity... — CVE ThreatInt
PocketMine-MP before 3.15.4 Denial of Service via InventoryTransactionPocketM... — CVE ThreatInt
Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked BuildsB... — CVE ThreatInt
Open5GS AMF/MME improper authorizationA vulnerability has been found in Open5... — CVE ThreatInt
Last week, MikroTik users were complaining about new "ops" admin accounts on their routers: https://www. — @campuscodi@mastodon.social
ASUS Control Center Flaw Allows Attackers to Gain Full Admin Control of the System — Cyber Security News