GHSA-QRR7-CRGJ-CMH3

creation_timestamp| type| source ---|---|--- 2025-07-22 21:45:57+00:00| seen|...Read More ...

Continue Reading
CVE-2022-1006

creation_timestamp| type| source ---|---|--- 2025-07-22 21:02:22+00:00| seen|...Read More ...

Continue Reading
Aim vulnerable to Cross-site Scripting

Cross-site Scripting (XSS) in aimhubio Aim 3.28.0 allows remote attackers to execute arbitrary JavaScript in victims browsers via malicious Python code submitted to the /api/reports endpoint, which is ...

Continue Reading
CVE-2025-31513

An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can elevate to administrator privileges via the IsAdminApprover parameter in a Request%20Building%20Access requestSubmit API...Rea ...

Continue Reading
CVE-2025-31511

An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can bypass manager approval by changing the user ID in a Request%20Building%20Access requestSubmit API...Read More ...

Continue Reading
CVE-2025-31512

An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can bypass manager approval via isAddedByApprover in a Request%20Building%20Access requestSubmit API...Read More ...

Continue Reading
CVE-2025-31512

An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can bypass manager approval via isAddedByApprover in a Request%20Building%20Access requestSubmit API...Read More ...

Continue Reading
CVE-2025-31513

An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can elevate to administrator privileges via the IsAdminApprover parameter in a Request%20Building%20Access requestSubmit API...Rea ...

Continue Reading

Back to Main

Subscribe for the latest news: