Advisory Catalog

Denial of Service condition in Next.js image optimization

DOMpurify has a nesting-based mXSS

Snipe-IT remote code execution

Gradio uses insecure communication between the FRP client and server

Gradio has a race condition in update_root_in_config may redirect user traffic

Gradio lacks integrity checking on the downloaded FRP client

Vault Community Edition privilege escalation vulnerability

Gradios's CORS origin validation is not performed when the request has a cookie

btcd did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionality

Magento Open Source Improper Authorization vulnerability

Magento Open Source Improper Access Control vulnerability

Magento Open Source Improper Input Validation vulnerability

Magento Open Source Cross-Site Scripting (XSS) vulnerability

This module provides a new UI experience for node editing using the Gutenberg Editor library. The module did not sufficiently protect some routes against a Cross Site Request Forgery attack. This vulnerability is mitigated by the fact that the tricked user needs to have an active session with the

This module enables you to manage blocks from specific modules in the specific themes. The module doesn't sufficiently check permissions under the scenario when a block is added using the form "/admin/structure/block/add/{plugin\_id}/{theme}" (route "block.admin\_add"). The attacker can add the blo

Adguard Home arbitrary file read vulnerability

Livewire Remote Code Execution on File Uploads

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Microsoft Windows Management Console Remote Code Execution Vulnerability

xhtml2pdf Denial of Service via crafted string

DeepSpeed Remote Code Execution Vulnerability

Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters

ggit is vulnerable to Command Injection via the fetchTags(branch) API

XXE in PHPSpreadsheet's XLSX reader

PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled

PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery when opening XLSX file

Saltcorn Server allows logged-in users to delete arbitrary files because of a path traversal vulnerability

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Parse Server's custom object ID allows to acquire role privileges

@saltcorn/plugins-loader unsanitized plugin name leads to a remote code execution (RCE) vulnerability when creating plugins using git source

@saltcorn/server Remote Code Execution (RCE) / SQL injection via prototype pollution by manipulating `lang` and `defstring` parameters when setting localizer strings

PAM module may allow accessing with the credentials of another user

Pomerium service account access token may grant unintended access to databroker API

OpenC3 Path Traversal via screen controller (`GHSL-2024-127`)

Portainer improperly uses an encryption algorithm in the AesEncrypt function

Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerability

LibreNMS has Stored Cross-site Scripting vulnerability in "Device Group" Name

Decidim has a cross-site scripting vulnerability in the version control page

Incorrect delegation lookups can make go-tuf download the wrong artifact

uPlot Prototype Pollution vulnerability

basic-auth-connect's callback uses time unsafe string comparison

RestrictedPython information leakage via `AttributeError.obj` and the `string` module

Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default

Rancher agents can be hijacked by taking over the Rancher Server URL

Remote command execution in promptr

Heap-based Buffer Overflow in sqlite-vec

Cross-Site Request Forgery (CSRF) in strawberry-graphql

OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timing attack.