nexryai

Products

ProductCVEsExploitedLatest
nexkey3–Dec 27, 2023
concorde2–Feb 11, 2025
altair1–Dec 19, 2024

Exploited and recent CVEs

  • CVE-2025-24973 Critical 9.4 Concorde not removing authentication tokens after logging out 0.2%
  • CVE-2025-24900 High 8.6 Concorde CSRF vulnerability due to insecure configuration of authentication cookie attributes 0.4%
  • CVE-2024-56200 High 8.6 Uncontrolled Recursion and Asymmetric Resource Consumption in Altair media/file proxy 0.6%
  • CVE-2023-52077 High 8.9 External apps using tokens issued by administrators and moderators can call admin APIs 0.7%
  • CVE-2023-49095 High 8.6 nexkey allows arbitrary users to impersonate any remote user due to missing signature validation 0.6%
  • CVE-2023-43805 High 7.5 Nexkey allows users to bypass authentication of Bull dashboard 0.8%