RacerZ-fighting/CVE-vulns

Releases0

Stars3

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-46412 ↗	Aug 25, 2025Monday, 25 August 2025, 15:15	6.5 MEDIUM	—
Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location.
CVE-2024-46413 ↗	Aug 25, 2025Monday, 25 August 2025, 15:15	5.1 MEDIUM	—
Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex method.
CVE-2024-50641 ↗	Aug 21, 2025Thursday, 21 August 2025, 18:15	8.1 HIGH	—
An authentication bypass vulnerability in PandoraNext-TokensTool v0.6.8 and before. An attacker can exploit this vulnerability to access API without any token.