Advisory Catalog

vllm: Malicious model to RCE by torch.load in hf_model_weights_iterator

uniapi version 1.0.7 contained an information harvesting script.

7-Zip Mark of the Web Bypass Vulnerability

Updatecli exposes Maven credentials in console output

ASTEVAL Allows Maliciously Crafted Format Strings to Lead to Sandbox Escape

ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape

Unlimited consumption of resources in @fastify/multipart

Envoy Admin Interface Exposed through prometheus metrics endpoint

try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter

lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.

Drupal AI Missing Authorization vulnerability

Buildah allows build breakout using malicious Containerfiles and concurrent builds

HashiCorp go-slug Vulnerable to Zip Slip Attack

Authenticated arbitrary file deletion in YesWiki

Authenticated Stored XSS in YesWiki

Unauthenticated DOM Based XSS in YesWiki

Cross-Site Request Forgery in CodeChecker API

Insecure default config access in WriteFreely

Craft CMS has a potential RCE with a compromised security key

Zot IdP group membership revocation ignored

KaTeX \htmlData does not validate attribute names

nbgrader's `frame-ancestors: self` grants all users access to formgrader

Eugeny Tabby Sends Password Despite Host Key Verification Failure

Indico Insecure Access

SimpleHelp Path Traversal Vulnerability

SimpleHelp Path Traversal Vulnerability

Drupal AI Cross-Site Request Forgery (CSRF) vulnerability

Rancher UI has Stored Cross-site Scripting vulnerability

Git LFS permits exfiltration of credentials via crafted HTTP URLs

Django has a potential denial-of-service vulnerability in IPv6 validation

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

TYPO3 Scheduler Module vulnerable to Cross-Site Request Forgery

TYPO3 Extension Manager Module vulnerable to Cross-Site Request Forgery

pgAdmin has Incorrect Default Permissions

This module enables you to do Two-Factor Authentication by email, using a user registered email to send a verification code to the user's email every time the user tries to log in to your site. The module did not sufficiently protect against brute force attacks, allowing an attacker to bypass the s

Apache Airflow Fab Provider Insufficient Session Expiration vulnerability

PHP-Textile has persistent XSS vulnerability in image link handling

WireGuard Portal v2 Vulnerable to OAuth Insecure Redirect URI / Account Takeover

NiceGUI On Air authentication issue

go-git clients vulnerable to DoS via maliciously crafted Git server replies

Extension:TabberNeue vulnerable to Cross-site Scripting

PhpSpreadsheet allows unauthorized Reflected XSS in Currency.php file

PhpSpreadsheet allows unauthorized Reflected XSS in the Accounting.php file

PhpSpreadsheet allows unauthorized Reflected XSS in the constructor of the Downloader class

SiYuan has an arbitrary file deletion vulnerability