Advisory Catalog

silverstripe/framework's User-Agent header not correctly invalidating user session

ip SSRF improper categorization in isPublic

Silverstripe X-Forwarded-Host request hostname injection

OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low privileges can gain administrative privileges on the web appli

Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability

Silverstripe SiteTree Creation Permission Vulnerability

Ghost allows CSV Injection during member CSV export

The Email Contact module provides email field display formatters that can display the field as a link to the contact form, or as an inline contact form. The module does not sufficiently handle restricted entity or field access to the mail sending form, when the "Email contact link" formatter is use

NASA AIT-Core uses unencrypted channels to exchange data over the network

scheb/two-factor-bundle bypass two-factor authentication with remember-me option

scheb/two-factor-bundle bypass two-factor authentication with unverified JWT trusted device token

@fastify/session reuses destroyed session cookie

json-schema-ref-parser Prototype Pollution issue

MiguelCastillo @bit/loader Prototype Pollution issue

robrichards/xmlseclibs XPath injection

Passbolt API Stored XSS on first/last name during setup

Passbolt Api Remote code execution

nzo/url-encryptor-bundle Insecure default secret key and IV allowing anyone to decrypt values

Cross-site Scripting vulnerabilities in Neos

Neos Information Disclosure Security Note

namshi/jose insecure JSON Web Signatures (JWS)

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

njwt Prototype Pollution vulnerability

A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat history. The vulnerability arises due to improper input validation when handling file paths during the chat history upload process. An attacker ca

RunGptLLM class in LlamaIndex has a command injection

MLflow has a Local File Read/Path Traversal bypass

laravel framework SQL Injection via limit and offset functions

laravel framework Unexpected database bindings via requests

Laravel Cookie serialization vulnerability

Laravel Cookie serialization vulnerability

gregwar/rst Local File Inclusion Vulnerability

fuel/core ImageMagick driver does not escape all shell arguments.

FOSUserBundle Session Hijacking Vulnerability

eZ Platform User data disclosure

EZsystems Remote code execution in file uploads

Stakater Forecastle has a directory traversal vulnerability

eZ Publish Legacy Passwordless login for LDAP users

eZ Platform Object Injection in SiteAccessMatchListener

eZ Publish Legacy Patch EZSA-2018-001 for Several vulnerabilities

eZ Publish Information disclosure in backend content tree menu

eZ Publish Remote code execution in file uploads

eZ Platform CSRF token in login form is disabled by default

eZ Platform Admin UI Password reset vulnerability

eZ Platform Object Injection in SiteAccessMatchListener

eZ Platform Admin UI Cross-site Scripting vulnerability

eZ Platform Password reset vulnerability

Cross-site Scripting in eZFind spellcheck

Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJS

Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJS

Drupal core Arbitrary PHP code execution