<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-1270</title><description>Every new CWE-1270 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-19636: Insuffucient Protections Lead to Brute Force</title><link>https://agentprime.io/advisories/CVE-2026-19636/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-19636/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Aug 2026 17:24:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15831: Generation of Incorrect Security Tokens in GitLab</title><link>https://agentprime.io/advisories/CVE-2026-15831/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15831/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 29 Jul 2026 19:00:01 GMT</pubDate><category>CVE</category></item><item><title>Pterodactyl&apos;s improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions</title><link>https://agentprime.io/advisories/GHSA-8r6w-3qq5-4p4r/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-8r6w-3qq5-4p4r/</guid><description>github.com/pterodactyl/wings &lt;1.12.2, fixed in 1.12.2. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 28 Jul 2026 15:43:25 GMT</pubDate><category>Go</category><category>github.com/pterodactyl/wings</category><category>Packagist</category><category>pterodactyl/panel</category></item><item><title>CVE-2026-49499: Dell PowerProtect Data Manager: Dell PowerProtect Data Manager, versions prior to 20.2.0.0…</title><link>https://agentprime.io/advisories/CVE-2026-49499/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-49499/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Jul 2026 15:39:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-59698: Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow a physically proximate attacker to gain access to the EOL le…</title><link>https://agentprime.io/advisories/CVE-2025-59698/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59698/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Dec 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>JWT token compromise can allow malicious actions including Remote Code Execution (RCE) in github.com/neuvector/neuvector</title><link>https://agentprime.io/advisories/GO-2024-3201/</link><guid isPermaLink="true">https://agentprime.io/advisories/GO-2024-3201/</guid><description>github.com/neuvector/neuvector &lt;0.0.0-20231003121714-be746957ee7c, fixed in 0.0.0-20231003121714-be746957ee7c. CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by OSV. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Oct 2024 15:42:40 GMT</pubDate><category>Go</category><category>github.com/neuvector/neuvector</category><category>critical</category></item><item><title>JWT token compromise can allow malicious actions including Remote Code Execution (RCE) </title><link>https://agentprime.io/advisories/GHSA-622h-h2p8-743x/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-622h-h2p8-743x/</guid><description>github.com/neuvector/neuvector &lt;0.0.0-20231003121714-be746957ee7c, fixed in 0.0.0-20231003121714-be746957ee7c. CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Oct 2023 20:43:52 GMT</pubDate><category>Go</category><category>github.com/neuvector/neuvector</category><category>critical</category></item><item><title>CVE-2023-2882: Privilege Escalation in CBOT&apos;s Chatbot</title><link>https://agentprime.io/advisories/CVE-2023-2882/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-2882/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 May 2023 08:18:23 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>Jenkins Report Portal Plugin configuration form does not mask tokens</title><link>https://agentprime.io/advisories/GHSA-j55j-28wc-v338/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-j55j-28wc-v338/</guid><description>org.jenkins-ci.plugins:reportportal &lt;=0.5, no fixed version yet. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Apr 2023 18:30:36 GMT</pubDate><category>Maven</category><category>org.jenkins-ci.plugins:reportportal</category></item><item><title>CVE-2022-31122: Wire-server vulnerable to Token Recipient Confusion resulting in account impersonation, deletion or malicious account creation</title><link>https://agentprime.io/advisories/CVE-2022-31122/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-31122/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Oct 2022 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend</title><link>https://agentprime.io/advisories/GHSA-23x9-8hxr-978c/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-23x9-8hxr-978c/</guid><description>keystone &lt;8.0.0a0, fixed in 8.0.0a0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 17 May 2022 04:13:50 GMT</pubDate><category>PyPI</category><category>keystone</category></item></channel></rss>