Vulnerabilities
DataBuff AI-APM-Web 0.1.10 Has Critical Hardcoded Credential Flaw
Unauthenticated attackers can use default admin credentials to gain full access to the application via a critical vulnerability in versions through 0.1.10.
ai-apm-web
Everything Threat Times has reported about ai-apm-web: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
DataBuff ai-apm-web Authentication Bypass Grants Admin Access via Hardcoded Secret
A critical flaw in DataBuff ai-apm-web allows attackers to forge admin tokens using a hardcoded secret, granting full access to protected APIs.