Description The W3C XML Signature Syntax and Processing (XMLDsig) specification, starting with 1.0, was originally published with a "RetrievalMethod is a URI ... that may…
![CVE-2024-34580 : APACHE XML SECURITY FOR C++ UP TO 2.0.4 XML SIGNATURE SERVER-SIDE REQUEST FORGERY ⚔ [Disputed]](https://prophaze.b-cdn.net/wp-content/uploads/2024/06/CVE-2024-34580.jpg)
Description Apache XML Security for C++ through 2.0.4 implements the XML Signature Syntax and Processing (XMLDsig) specification without protection against an SSRF payload in a…
Description A command injection vulnerability exists in the mudler/localai version 2.14.0. The vulnerability arises from the application's handling of the backend parameter in the configuration…
Description Axiros AXESS Auto Configuration Server (ACS) 4.x and 5.0.0 has Incorrect Access Control. An authorization bypass allows remote attackers to achieve unauthenticated remote code…
Description H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. References https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/H3C/Magic%20R230/hardcode/README.md…
Description An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web…