Advisory Catalog

Symfony Vulnerable to Identity Spoofing via Unanchored DN Regex in X509Authenticator

Dolibarr ERP CRM contains a remote code evaluation vulnerability

YesWiki: Unauthenticated SQL Injection

Twig: PHP code injection via `{% use %}` template name

Concrete CMS Vulnerable to Relative Path Traversal

Drupal Core has a SQL Injection issue

TYPO3 Remote Code Execution in extension "Content Element Selector" (ceselector)

Formie: Pre-authenticated server-side template injection in Hidden fields

AVideo's Meet plugin: `uploadRecordedVideo.json.php` derives `users_id` from the uploaded filename and calls passwordless `User->login()`, allowing any caller with the Meet shared secret to obtain a session as arbitrary users including admin

torrentpier has PHP Serialize Injections

PrestaShop has a stored XSS executable in customer service view

Snipe-IT has insecure permissions in file uploads

Compromised tag of intercom-php published via GitHub

phpMyFAQ has unauthenticated SQL injection via User-Agent header in BuiltinCaptcha

phpMyFAQ enables unauthenticated 2FA brute-force attack via /admin/check acceptance of arbitrary user-id

Scramble vulnerable to remote code execution via evaluation of user-controlled input in validation rules

Kimai has Missing Voter Check that Allows Cross-Team Timesheet Manipulation

Grav has multiple RCE vectors: unsafe unserialize (x3), command injection in git clone, SSTI blocklist bypass

Grav Vulnerable to Privilege Escalation via Missing Server-Side Validation of groups/access

Grav Vulnerable to Remote Code Execution (RCE) via Malicious Plugin ZIP Upload in Direct Install Feature

Magento LTS has Weak API Session ID — Predictable MD5 of Time-Derived Inputs

phpVMS has an /importer authorization bypass causing full database wipe

PhpSpreadsheet has SSRF/RCE in IOFactory::load when $filename is user controlled

Cockpit is vulnerable to arbitrary code execution

CI4MS Theme::upload is vulnerable to Zip Slip leading to RCE

CI4MS Backup::restore is vulnerable to Zip Slip leading to RCE

CI4MS: Backup Management Full Account Takeover for All Roles & Privilege Escalation via Stored DOM Blind XSS

Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration

goodoneuz/pay-uz: the /payment/api/editable/update endpoint overwrites existing PHP payment hook files

Froxlor has Local File Inclusion via path traversal in API `def_language` parameter leads to Remote Code Execution

Froxlor has a PHP Code Injection via Unescaped Single Quotes in userdata.inc.php Generation (MysqlServer API)

WWBN AVideo has an incomplete fix for CVE-2026-33502: Command Injection

WWBN AVideo YPTSocket WebSocket Broadcast Relay Leads to Unauthenticated Cross-User JavaScript Execution via Client-Side eval() Sinks

CI4MS Vulnerable to .env CRLF Injection via Unvalidated `host` Parameter in Install Controller

CI4MS: Company Information Public-Facing Page Full Platform Compromise & Full Account Takeover for All Roles & Privilege-Escalation via System Settings Company Information Stored DOM XSS

CI4MS: Profile & User Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Stored Cross‑Site Scripting (Stored XSS) in Backend User Management Allows Session Hijacking and Full Administrative Account Compromise

CI4MS: Blogs Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Blogs Posts Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Blogs Posts (Categories) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Pages Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Menu Management (Posts) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS

CI4MS: System Settings (Company Information) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: System Settings (Social Media Management) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Blogs Tags Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

Auth0 PHP SDK has Insufficient Entropy in Cookie Encryption

baserCMS has OS command injection vulnerability in installer