VulnCheck

AIT-GUI < 2.5.1 Missing Authentication via Sessions.create()

Horde IMP < 7.0.1 Path Traversal via Compose.php img src

Hermes WebUI < 0.51.788 Unauthenticated RCE via Terminal API

SuperPlane < 0.30.0 SMTP Header Injection via Webhook Event Title

SuperPlane < 0.27.0 Broken Object Level Authorization via CanvasService gRPC

phpUploader < 2.0.2 Unauthenticated Database Exposure via index model

Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint

Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints

NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API

Perry < 0.5.1159 Path Traversal via ArtifactReady WebSocket