← All credits
PS Positive Security GmbH
13 vulnerability records and advisories credit this contributor.
CVE-2026-15576
Agent receiver accepts mTLS requests without a client certificate
CVE-2026-24096
Insufficient permission validation on multiple REST API Quick Setup endpoints
CVE-2025-64997
Insufficient permission validation when showing agent information
CVE-2025-58121
Insufficient permission validation on multiple REST API endpoints
CVE-2025-58122
Insufficient permission validation when configuring notification parameters
CVE-2024-6163
local IP restriction of internal HTTP endpoints
CVE-2025-32918
Livestatus injection in autocomplete endpoint
CVE-2025-1712
Arbitrary file write with vcrtrace
CVE-2024-38857
Reflected links in visuals facilitate phishing attacks
CVE-2024-28833
Missing brute-force protection for two factor authentication