CWE-749.

Home Assistant: Cross-origin iframe access token exfiltration via WebView JS bridge callback injection

• home-assistant core
• Home Assistant Companion app (iOS)
• Code injection
• CWE-346

Synology C2 Identity Edge Server: An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server…

• Synology C2 Identity Edge Server
• CWE-749

IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution

• IBM Engineering Lifecycle Management
• CWE-749

PenPot MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE

• CWE-749

<2.15.0 · fixed in 2.15.0

Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99)

• CWE-749

>=3.15.4, <3.21.6 || >=4.0.0-alpha.1, <4.4.6 · fixed in 3.21.6, 4.4.6

webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins

• CWE-749

<5.2.4 · fixed in 5.2.4

Arqit SKA-Platform Enables Access to Debug Information

• Arqit Symmetric Key Agreement Platform
• CWE-749

Arqit SKA-Platform Vulnerable to Key Exposure

• Arqit Symmetric Key Agreement Platform
• CWE-749

Nautobot: GitRepository.current_head field should not be writable through REST API

• CWE-471
• CWE-749

<2.4.33 || >=3.0.0a2, <3.1.2 · fixed in 2.4.33, 3.1.2

Fuji Electric Tellus Exposed Dangerous Method or Function

• Fuji Electric Tellus
• CWE-749

ivanti Endpoint Manager: An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version…

• ivanti Endpoint Manager
• CWE-749

view_component: Preview Route Can Dispatch Inherited Helper Methods

• CWE-277
• CWE-749

>=3.0.0, <4.9.0 · fixed in 4.9.0

Exposed dangerous function in windows host

• Qualcomm, Inc. Snapdragon
• CWE-749

VM2 Sandbox Breakout Through __lookupGetter__

• Code injection
• CWE-693

<3.11.0 · fixed in 3.11.0

Exposed Dangerous Method or Function in GitLab

• GitLab
• CWE-749

Tandoor Recipes — CustomIsShared permits DELETE/PUT on RecipeBook by shared (read-only) users

• recipes
• CWE-749

CVE-2026-2275

• CrewAI
• CWE-749

An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges.

• Ivanti Desktop and Server Management
• CWE-749

OneUptime has Synthetic Monitor RCE via exposed Playwright browser object

• CWE-749

<10.0.21 · fixed in 10.0.21

OneUptime: Synthetic Monitor RCE via exposed Playwright browser object

• CWE-749

<10.0.20 · fixed in 10.0.20

RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server

• rustdesk-client RustDesk Client
• Broken access control
• CWE-749

In wlan STA driver, there is a possible out of bounds write due to a missing bounds check.

• MediaTek, Inc. MediaTek chipset
• CWE-749

Docker Model Runner Unauthenticated Runtime Flag Injection via _configure Endpoint

• docker model-runner
• CWE-749

OpenS100 Portrayal Engine Unrestricted Lua Standard Library Access

• OpenS100
• CWE-749
• CWE-829

Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise

• Authentication bypass
• CWE-749

<2.5.27 || >=2.6.0, <2.6.10 · fixed in 2.5.27, 2.6.10

Exposed Dangerous Method or Function in HLOS

• Qualcomm, Inc. Snapdragon
• CWE-749

OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution

• Authentication bypass
• CWE-749

<1.0.216 · fixed in 1.0.216

Microsoft Playwright MCP Server vulnerable to DNS Rebinding Attack; Allows Attackers Access to All Server Tools

• CWE-749

<0.0.40 · fixed in 0.0.40

Self-hosted n8n has Legacy Code node that enables arbitrary file read/write

• Privilege escalation
• CWE-749

>=1.2.1, <2.0.0 · fixed in 2.0.0

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability

• RealDefense SUPERAntiSpyware
• CWE-749

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability

• RealDefense SUPERAntiSpyware
• CWE-749

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability

• RealDefense SUPERAntiSpyware
• CWE-749

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability

• RealDefense SUPERAntiSpyware
• CWE-749

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability

• RealDefense SUPERAntiSpyware
• CWE-749

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability

• RealDefense SUPERAntiSpyware
• CWE-749

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability

• RealDefense SUPERAntiSpyware
• CWE-749

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability

• RealDefense SUPERAntiSpyware
• CWE-749

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability

• RealDefense SUPERAntiSpyware
• CWE-749

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability

• RealDefense SUPERAntiSpyware
• CWE-749

Docker MCP Plugin and Docker MCP Gateway have DNS Rebinding vulnerability when running in sse or streaming mode in github.com/docker/mcp-gateway

• CWE-749

<0.28.0 · fixed in 0.28.0

Nextcloud: Cross-site scripting (XSS) vulnerability in a reachable files_pdfviewer example directory…

• Nextcloud
• CWE-749

Exposed Dangerous Method or Function in Automotive Software platform based on QNX

• Qualcomm, Inc. Snapdragon
• CWE-749

Icinga 2 API users could access restricted values in filter expressions

• icinga2
• Information disclosure
• CWE-204

The Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 for Android lacks authentication.

• CWE-749

Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspecified web interfa…

• Code injection
• CWE-749

OpenBlow Missing Critical Security Headers

• Laser Romae s.r.l. OpenBlow
• Code injection
• CWE-749

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary.

• CWE-749

Hewlett Packard Enterprise Insight Remote Support: A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an…

• Hewlett Packard Enterprise Insight Remote Support
• CWE-749

filebrowser Allows Shell Commands to Spawn Other Commands

• Command injection
• CWE-183

<2.33.10 · fixed in 2.33.10

Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability

• Autel MaxiCharger AC Wallbox Commercial
• CWE-749

WOLFBOX Level 2 EV Charger LAN OTA Exposed Dangerous Method Remote Code Execution Vulnerability

• WOLFBOX Level 2 EV Charger
• CWE-749

webpack-dev-server users' source code may be stolen when they access a malicious web site

• CWE-749

<5.2.1 · fixed in 5.2.1

Backdoor Functionality via USB Drive in eCharge Hardy Barth cPH2 / cPP2 charging stations

• eCharge Hardy Barth cPH2 / cPP2 charging stations
• CWE-749

Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise)

• SAP_SE SAP S/4HANA (Private Cloud & On-Premise)
• CWE-749

Convertigo: TwsCachedXPathAPI in Convertigo versions before 8.3.11 did not restrict commons-jxpath…

• Convertigo
• CWE-749

TECNO com.transsion.carlcare: Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may…

• TECNO com.transsion.carlcare
• CWE-749

Windows Local Session Manager (LSM) Denial of Service Vulnerability

• Microsoft Windows 11 version 22H2
• Microsoft Windows 11 version 22H3
• CWE-749

Exposed Dangerous Method or Function in HLOS

• Qualcomm, Inc. Snapdragon
• CWE-749

H2O Vulnerable to Execution of Arbitrary Files

• CWE-749

>=3.32.1.2, <=3.46.0 · no fixed version yet

Sensitive Data Exposure in PTT Inc.'s HGS Mobile App

• PTT Inc. HGS Mobile App
• CWE-749