EQSTLab
12 kredili kayıt · son 12 ayda 12 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-101062İstismar yok | Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registrationobot-platform · obot · CWE-863 | Yüksek8,7 | — | %0,3 | 2 gün önce |
28İzleyin | CVE-2026-101059İstismar yok | utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypassuniversal-tool-calling-protocol · python-utcp · CWE-918 | Yüksek7,1 | — | %0,2 | 2 gün önce |
28İzleyin | CVE-2026-101058İstismar yok | python-utcp before 1.1.12 SSRF via Remote HTTP Manualuniversal-tool-calling-protocol · python-utcp · CWE-918 | Yüksek7,1 | — | %0,2 | 2 gün önce |
28İzleyin | CVE-2026-90933İstismar yok | laradashboard through 1.2.2 Missing Authorization via License APIlaradashboard · laradashboard · CWE-862 | Yüksek7,1 | — | %0,3 | 14 Eyl 2026 |
30İzleyin | CVE-2026-85124İstismar yok | @fastify/http-proxy vulnerable to prefix escape via backslash dot-segmentsfastify · fastify\/http-proxy · CWE-22 | Yüksek7,5 | — | %0,7 | 3 Eyl 2026 |
30İzleyin | CVE-2026-75759İstismar yok | Encrypted ID token or JARM response accepted without a nested signature in erlef oidccerlef · oidcc · CWE-347 | Yüksek7,6 | — | %0,2 | 29 Ağu 2026 |
32İzleyin | CVE-2026-16231İstismar yok | hbs vulnerable to XSS via registerAsyncHelper output-escaping bypasshbs project · hbs · CWE-79 | Yüksek8,1 | — | %0,2 | 25 Ağu 2026 |
30İzleyin | CVE-2026-65633İstismar yok | Purpose-limited JWT accepted as full bearer authentication in AshAuthenticationteam-alembic · ash_authentication · CWE-287 | Yüksek7,6 | — | %0,6 | 25 Ağu 2026 |
33İzleyin | CVE-2026-76225İstismar yok | ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSVarcadedata · arcadedb · CWE-918 | Yüksek8,3 | — | %0,4 | 19 Ağu 2026 |
36İzleyin | CVE-2026-18248İstismar yok | @fastify/aws-lambda vulnerable to Lambda event spoofing via client-controlled x-apigateway-event headerfastify · fastify\/aws-lambda · CWE-345 | Kritik9,1 | — | %0,4 | 3 Ağu 2026 |
35İzleyin | CVE-2026-64623İstismar yok | Network-AI before 5.13.4 Cryptographic Signature Verification Bypassjovancoding · network-ai · CWE-347 | Yüksek8,8 | — | %0,3 | 20 Tem 2026 |
37İzleyin | CVE-2026-62241İstismar yok | clawvet < 0.7.5 Hard-coded JWT Secret Session Forgerymohibshaikh · clawvet · CWE-306 | Kritik9,3 | — | %0,7 | 16 Tem 2026 |
- CVE-2026-10106234İzleyin
Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration
YüksekCVSS 8,7İstismar yokEPSS %0obot-platform · obot2 gün önce
- CVE-2026-10105928İzleyin
utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypass
YüksekCVSS 7,1İstismar yokEPSS %0universal-tool-calling-protocol · python-utcp2 gün önce
- CVE-2026-10105828İzleyin
python-utcp before 1.1.12 SSRF via Remote HTTP Manual
YüksekCVSS 7,1İstismar yokEPSS %0universal-tool-calling-protocol · python-utcp2 gün önce
- CVE-2026-9093328İzleyin
laradashboard through 1.2.2 Missing Authorization via License API
YüksekCVSS 7,1İstismar yokEPSS %0laradashboard · laradashboard14 Eyl 2026
- CVE-2026-8512430İzleyin
@fastify/http-proxy vulnerable to prefix escape via backslash dot-segments
YüksekCVSS 7,5İstismar yokEPSS %1fastify · fastify\/http-proxy3 Eyl 2026
- CVE-2026-7575930İzleyin
Encrypted ID token or JARM response accepted without a nested signature in erlef oidcc
YüksekCVSS 7,6İstismar yokEPSS %0erlef · oidcc29 Ağu 2026
- CVE-2026-1623132İzleyin
hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass
YüksekCVSS 8,1İstismar yokEPSS %0hbs project · hbs25 Ağu 2026
- CVE-2026-6563330İzleyin
Purpose-limited JWT accepted as full bearer authentication in AshAuthentication
YüksekCVSS 7,6İstismar yokEPSS %1team-alembic · ash_authentication25 Ağu 2026
- CVE-2026-7622533İzleyin
ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV
YüksekCVSS 8,3İstismar yokEPSS %0arcadedata · arcadedb19 Ağu 2026
- CVE-2026-1824836İzleyin
@fastify/aws-lambda vulnerable to Lambda event spoofing via client-controlled x-apigateway-event header
KritikCVSS 9,1İstismar yokEPSS %0fastify · fastify\/aws-lambda3 Ağu 2026
- CVE-2026-6462335İzleyin
Network-AI before 5.13.4 Cryptographic Signature Verification Bypass
YüksekCVSS 8,8İstismar yokEPSS %0jovancoding · network-ai20 Tem 2026
- CVE-2026-6224137İzleyin
clawvet < 0.7.5 Hard-coded JWT Secret Session Forgery
KritikCVSS 9,3İstismar yokEPSS %1mohibshaikh · clawvet16 Tem 2026