<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-837</title><description>Every new CWE-837 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>PocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packets</title><link>https://agentprime.io/advisories/GHSA-pg53-p7qp-65cv/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-pg53-p7qp-65cv/</guid><description>pocketmine/pocketmine-mp &lt;5.44.2, fixed in 5.44.2. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 16:32:58 GMT</pubDate><category>Packagist</category><category>pocketmine/pocketmine-mp</category></item><item><title>CVE-2026-112285: Thelia before 3.1.5 and 3.2.4 Coupon Usage Limit Bypass via Pay-Later Orders</title><link>https://agentprime.io/advisories/CVE-2026-112285/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-112285/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Oct 2026 13:55:29 GMT</pubDate><category>CVE</category></item><item><title>Payload Ecommerce has an order confirmation validation issue</title><link>https://agentprime.io/advisories/GHSA-8r29-2mp2-pmrw/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-8r29-2mp2-pmrw/</guid><description>@payloadcms/plugin-ecommerce &lt;3.90.0 || &gt;=4.0.0-canary.0, &lt;4.0.0-canary.34, fixed in 3.90.0, 4.0.0-canary.34. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 06 Oct 2026 16:17:54 GMT</pubDate><category>npm</category><category>@payloadcms/plugin-ecommerce</category></item><item><title>CVE-2026-45734: MyBB: Default CAPTCHA missing invalidation</title><link>https://agentprime.io/advisories/CVE-2026-45734/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-45734/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Aug 2026 15:51:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44601: Tor: Tor before 0.4.9.7, when circuit queue memory pressure exists…</title><link>https://agentprime.io/advisories/CVE-2026-44601/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44601/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 07 May 2026 03:09:51 GMT</pubDate><category>CVE</category></item><item><title>Grav Vulnerable to Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic</title><link>https://agentprime.io/advisories/GHSA-rr73-568v-28f8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-rr73-568v-28f8/</guid><description>getgrav/grav &lt;2.0.0-beta.2, fixed in 2.0.0-beta.2. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 05 May 2026 21:29:53 GMT</pubDate><category>Packagist</category><category>getgrav/grav</category></item><item><title>InventoryGui allows item duplication in GUIs which use GuiStorageElement</title><link>https://agentprime.io/advisories/GHSA-7whh-79j3-7c55/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7whh-79j3-7c55/</guid><description>de.themoep:inventorygui &lt;1.6.5, fixed in 1.6.5. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 28 Oct 2025 17:49:50 GMT</pubDate><category>Maven</category><category>de.themoep:inventorygui</category></item><item><title>InventoryGui allows item duplication with experimental &quot;Bundle&quot; item in GUIs which use GuiStorageElement</title><link>https://agentprime.io/advisories/GHSA-rgvh-4m82-fvjq/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-rgvh-4m82-fvjq/</guid><description>de.themoep:inventorygui &lt;1.6.4-SNAPSHOT, fixed in 1.6.4-SNAPSHOT. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Oct 2025 20:12:50 GMT</pubDate><category>Maven</category><category>de.themoep:inventorygui</category></item><item><title>InventoryGui affected by item duplication in GUIs which use GuiStorageElement</title><link>https://agentprime.io/advisories/GHSA-598q-jw82-5w66/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-598q-jw82-5w66/</guid><description>de.themoep:inventorygui &lt;1.6.2-SNAPSHOT, fixed in 1.6.2-SNAPSHOT. CVSS 5.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Oct 2025 20:12:31 GMT</pubDate><category>Maven</category><category>de.themoep:inventorygui</category></item><item><title>CVE-2025-54315: Matrix specification: The Matrix specification before 1.16 (i.e…</title><link>https://agentprime.io/advisories/CVE-2025-54315/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54315/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Oct 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-58135: Zoom Workplace Clients for Windows - Improper Action Enforcement</title><link>https://agentprime.io/advisories/CVE-2025-58135/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-58135/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Sep 2025 21:45:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-11301: Improper Enforcement of Unique Constraint in lunary-ai/lunary</title><link>https://agentprime.io/advisories/CVE-2024-11301/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-11301/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Mar 2025 10:10:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-11717: Weak credentials in CTFd</title><link>https://agentprime.io/advisories/CVE-2024-11717/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-11717/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Jan 2025 16:08:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-11716: CTFd: While assignment of a user to a team (bracket) in CTFd should be possible only once…</title><link>https://agentprime.io/advisories/CVE-2024-11716/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-11716/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Jan 2025 16:07:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-12123: Unauthorized Modification of Ticket Requester</title><link>https://agentprime.io/advisories/CVE-2024-12123/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-12123/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Dec 2024 03:26:00 GMT</pubDate><category>CVE</category></item><item><title>Keycloak Services has a potential bypass of brute force protection</title><link>https://agentprime.io/advisories/GHSA-gc7q-jgjv-vjr2/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-gc7q-jgjv-vjr2/</guid><description>org.keycloak:keycloak-services &lt;22.0.12 || &gt;=23.0.0, &lt;24.0.7 || &gt;=25.0.0, &lt;25.0.4, fixed in 22.0.12, 24.0.7, 25.0.4. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Sep 2024 22:29:01 GMT</pubDate><category>Maven</category><category>org.keycloak:keycloak-services</category></item><item><title>Duplicate Advisory: Keycloak has a brute force login protection bypass</title><link>https://agentprime.io/advisories/GHSA-8wm9-24qg-m5qj/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-8wm9-24qg-m5qj/</guid><description>org.keycloak:keycloak-services &lt;24.0.4, fixed in 24.0.4. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Sep 2024 21:31:12 GMT</pubDate><category>Maven</category><category>org.keycloak:keycloak-services</category></item><item><title>CVE-2023-6759: Thecosy IceCMS Love resource improper enforcement of a single, unique action</title><link>https://agentprime.io/advisories/CVE-2023-6759/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6759/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Dec 2023 15:00:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-6467: Thecosy IceCMS Comment Like improper enforcement of a single, unique action</title><link>https://agentprime.io/advisories/CVE-2023-6467/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6467/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 02 Dec 2023 14:00:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-6438: Thecosy IceCMS Like improper enforcement of a single, unique action</title><link>https://agentprime.io/advisories/CVE-2023-6438/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6438/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Nov 2023 17:00:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-5313: phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action</title><link>https://agentprime.io/advisories/CVE-2023-5313/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-5313/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 30 Sep 2023 15:00:04 GMT</pubDate><category>CVE</category></item></channel></rss>