Advisory Catalog

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)

Maker.js has Unsafe Property Copying in makerjs.extendObject

JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

SolarWinds Web Help Desk Security Control Bypass Vulnerability

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor

n8n Unsafe Workflow Expression Evaluation Allows Remote Code Execution

Saltcorn's Reflected XSS and Command Injection vulnerabilities can be chained for 1-click-RCE

vm2 has a Sandbox Escape

dcap-qvl has Missing Verification for QE Identity

SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

Langflow affected by Remote Code Execution via validate_code() exec()

gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)

docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage

SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability

Cisco Unified Communications Products Code Injection Vulnerability

sm-crypto Affected by Private Key Recovery in SM2-PKE

vLLM affected by RCE via auto_map dynamic module loading during model initialization

seroval Affected by Prototype Pollution via JSON Deserialization

Laravel Redis Horizontal Scaling Insecure Deserialization

GNU InetUtils Argument Injection Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Orval has a code injection via unsanitized x-enum-descriptions in enum generation

Lobe Chat affected by Cross-Site Scripting(XSS) that can escalate to Remote Code Execution(RCE)

Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter

Crawl4AI Has Local File Inclusion in Docker API via file:// URLs

REC in MCPJam inspector due to HTTP Endpoint exposes

Livewire Filemanager does not restrict uploaded file types

h3 v1 has Request Smuggling (TE.TE) issue

enclave-vm Vulnerable to Sandbox Escape via Host Error Prototype Chain

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

Malicious website can execute commands on the local system through XSS in the OpenCode web UI

orval MCP client is vulnerable to a code injection attack.

MindsDB has improper sanitation of filepath that leads to information disclosure and DOS

Salesforce Uni2TS has a Code Injection vulnerability

React Router has Path Traversal in File Session Storage

wolfSSL Python module vulnerable to Improper Authentication

n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling

pnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default"

terminal-controller-mcp vulnerable to Command Injection

n8n Vulnerable to RCE via Arbitrary File Write

Vega XSS via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.1, the GraphQL mutation "WorkspacePopoverDeletionMutation" allows users to delete workspace-related objects such as dashboards and investigation cases. However, the mutation lack

jsPDF has Local File Inclusion/Path Traversal vulnerability

AdonisJS Path Traversal in Multipart File Handling

Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling