Advisory Catalog

phpMyFAQ has Stored XSS in user list via admin-managed display_name

Croogo CMS has a path traversal vulnerability

Cadmium CMS has a background arbitrary file upload vulnerability

LibreNMS Alert Rule API Cross-Site Scripting Vulnerability

Kimai contains a SameSite cookie vulnerability

phpMyFAQ contains a CSV injection vulnerability

AWS SDK for PHP's S3 Encryption Client has a Key Commitment Issue

Auth0 WordPress has Improper Audience Validation via Auth0-PHP SDK Dependency

Auth0 Symfony SDK has Improper Audience Validation via Auth0-PHP SDK

Auth0 Laravel SDK has Improper Audience Validation via Auth0-PHP SDK dependency

Auth0-PHP SDK has Improper Audience Validation

Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component

Pagekit CMS is vulnerable to OS Command Injection via Storage component

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

Grav may be vulnerable to SSRF attack via Twig Templates

Grav is vulnerable to Stored XSS through authenticated user-edited content

MineAdmin has an insecure default password

FoF Pretty Mail has a server-side template injection vulnerability

AzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCE

Ibexa User Bundle is missing password change validation

Shopware Storefront Reflected XSS in Storefront Login Page

SAML PHP Toolkit Vulnerability on xmlseclibs CVE-2025-66475

Neuron MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)

Neuron MySQLSelectTool “read-only” bypass via `SELECT ... INTO OUTFILE` (file write → potential RCE)

Filament multi-factor authentication (app) recovery codes can be used multiple times

robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation

alexusmai laravel-file-manager is vulnerable to Directory Traversal via the unzip/extraction functionality

alexusmai laravel-file-manager is vulnerable to Directory Traversal

FeehiCMS Has a Remote Code Execution via Unrestricted File Upload in Ad Management

Aimeos GrapesJS CMS extension has possible stored XSS that's exploitable by authenticated editors

Grav CMS is vulnerable to Cross Site Scripting (XSS) in the page editor

Mautic user without privileged access to the Marketplace can install and uninstall composer packages

GrapesJsBuilder File Upload allows all file uploads

Grav Admin Plugin is vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/accounts/groups/[group]` parameter `data[readableName]`

Grav vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/pages/[page]` in Multiples parameters

Grav vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/pages/[page]` parameter `data[header][template]` in Advanced Tab

Grav is vulnerable to Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][content][items], located in the "Blog Config" tab

Grav Admin Plugin vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/config/site` parameter `data[taxonomies]`

Grav Admin Plugin vulnerable to User Enumeration & Email Disclosure

Grav vulnerable to Information Disclosure via IDOR in Grav Admin Panel

Grav vulnerable to Denial of Service via Improper Input Handling in 'Supported' Parameter

Grav Exposes Password Hashes Leading to privilege escalation

Grav is vulnerable to a DOS on the admin panel

Grav vulnerable to Path Traversal allowing server files backup

Grav has Broken Access Control which allows an Editor to modify the page's YAML Frontmatter to alter form processing actions

Grav is vulnerable to Arbitrary File Read

Grav is Vulnerable to Security Sandbox Bypass with SSTI (Server Side Template Injection)

Grav is vulnerable to Server-Side Template Injection (SSTI) via Forms

Snipe-IT allows stored XSS via the Locations "Country" field

Grav vulnerable to Privilege Escalation and Authenticated Remote Code Execution via Twig Injection