Advisory Catalog

electron-updater Code Signing Bypass on Windows

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Microsoft SharePoint Deserialization Vulnerability

Microsoft Windows Hyper-V Privilege Escalation Vulnerability

Aim denial of service vulnerability

Directus Allows Single Sign-On User Enumeration

Directus GraphQL Field Duplication Denial of Service (DoS)

Directus incorrectly handles `_in` filter

Vanna vulnerable to SQL Injection

Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes

Certifi removes GLOBALTRUST root certificate

Server Side Request Forgery (SSRF) attack in Fedify

OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access

rejetto HFS vulnerable to OS Command Execution by remote authenticated users

Duplicate Advisory: Gogs allows argument injection during the tagging of a new release

aimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin account

yt-dlp File system modification and RCE through improper file-extension sanitization

Potential memory exhaustion attack due to sparse slice deserialization

Flowise Cors Misconfiguration in packages/server/src/index.ts

Flowise Path Injection at /api/v1/openai-assistants-file

@amoy/common v was discovered to contain a prototype pollution via the function extend

frappejs was discovered to contain a prototype pollution via the function registerView

akbr patch-into was discovered to contain a prototype pollution via the function patchInto

Name confusion in x509 Subject Alternative Name fields

lollms vulnerable to dot-dot-slash path traversal in XTTS server

A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any files ending in `.json` on the target system, leading to a denial of service as users are unable to au

lollms vulnerable to path traversal due to unauthenticated root folder settings change

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability is located in the filter_history function within the utils.py module. This function takes a user-provided keyword and attempts to match it against chat history f

h2o vulnerable to unexpected POST request shutting down server

lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE

Path traversal in saltstack

pdoc embeds link to malicious CDN if math mode is enabled

Panic when parsing invalid palette-color images in golang.org/x/image

HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation

Aimeos HTML client may potentially reveal sensitive information in error log

VMware ESXi Authentication Bypass Vulnerability

Arbitrary File Creation in opencart

Zip slip in opencart

SQL injection in opencart

Lightning Network Daemon (LND)'s onion processing logic leads to a denial of service

Strapi Server-Side Request Forgery (SSRF)

js2py allows remote code execution

LocalAI path traversal vulnerability

socket.io has an unhandled 'error' event

Moodle CSRF risks due to misuse of confirm_sesskey

Moodle HTTP authorization header is preserved between "emulated redirects"

Dolibarr arbitrary file upload vulnerability

Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec

Rancher does not automatically clean up a user deleted or disabled from the configured Authentication Provider

ws affected by a DoS when handling a request with many HTTP headers