pinchtab kayıtları
pinchtab üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %85,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-918 Server-Side Request Forgery (SSRF)3
- CWE-290 Authentication Bypass by Spoofing1
- CWE-598 Use of HTTP Request With Sensitive Query String1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2026-30834İstismar yok | PinchTab: SSRF with Full Response Exfiltration via Download Handlerpinchtab · pinchtab · CWE-918 | Yüksek7,5 | — | %0,5 | 7 Mar 2026 |
29İzleyin | CVE-2026-33623İstismar yok | PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Executionpinchtab · pinchtab · CWE-78 | Yüksek7,2 | — | %3,4 | 26 Mar 2026 |
26İzleyin | CVE-2026-33621İstismar yok | PinchTab: Unapplied Rate Limiting Middleware Allows Unbounded Brute-Force of API Tokenpinchtab · pinchtab · CWE-290 | Orta6,5 | — | %0,4 | 26 Mar 2026 |
24İzleyin | CVE-2026-33622İstismar yok | A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Executionpinchtab · pinchtab · CWE-94 | Orta6,1 | — | %0,8 | 26 Mar 2026 |
22İzleyin | CVE-2026-33619İstismar yok | PinchTab has Unauthenticated Blind SSRF in Task Scheduler via Unvalidated callbackUrlpinchtab · pinchtab · CWE-918 | Orta5,5 | — | %0,4 | 26 Mar 2026 |
17İzleyin | CVE-2026-33620İstismar yok | PinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary Systemspinchtab · pinchtab · CWE-598 | Orta4,3 | — | %0,4 | 26 Mar 2026 |
14İzleyin | CVE-2026-33081İstismar yok | PinchTab has Blind SSRF via browser-side redirect bypass in /download URL validationpinchtab · pinchtab · CWE-918 | Düşük3,7 | — | %0,3 | 20 Mar 2026 |
- CVE-2026-3083430İzleyin
PinchTab: SSRF with Full Response Exfiltration via Download Handler
YüksekCVSS 7,5İstismar yokEPSS %0pinchtab · pinchtab7 Mar 2026
- CVE-2026-3362329İzleyin
PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution
YüksekCVSS 7,2İstismar yokEPSS %3pinchtab · pinchtab26 Mar 2026
- CVE-2026-3362126İzleyin
PinchTab: Unapplied Rate Limiting Middleware Allows Unbounded Brute-Force of API Token
OrtaCVSS 6,5İstismar yokEPSS %0pinchtab · pinchtab26 Mar 2026
- CVE-2026-3362224İzleyin
A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution
OrtaCVSS 6,1İstismar yokEPSS %1pinchtab · pinchtab26 Mar 2026
- CVE-2026-3361922İzleyin
PinchTab has Unauthenticated Blind SSRF in Task Scheduler via Unvalidated callbackUrl
OrtaCVSS 5,5İstismar yokEPSS %0pinchtab · pinchtab26 Mar 2026
- CVE-2026-3362017İzleyin
PinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary Systems
OrtaCVSS 4,3İstismar yokEPSS %0pinchtab · pinchtab26 Mar 2026
- CVE-2026-3308114İzleyin
PinchTab has Blind SSRF via browser-side redirect bypass in /download URL validation
DüşükCVSS 3,7İstismar yokEPSS %0pinchtab · pinchtab20 Mar 2026