Author: Cyberthreat Blog

Mautic SSO/OAuth2 plugins are vulnerable to CSRF of the state parameter resulting in authentication bypass through clickjacking

EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root

gtk-vnc 0.4.2 and older doesn’t check framebuffer boundaries correctly when updating framebuffer which may lead to memory corruption when rendering

kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS

Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function.