Advisory Catalog

CraftBeerPi 4 allows arbitrary code execution

xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.

python-jose algorithm confusion guard bypassed by DER-encoded public keys

changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution

PHPECC vulnerable to multiple cryptographic side-channel attacks

pyLoad allows upload to arbitrary folder lead to RCE

Progressive web applications are web applications that load like regular web pages or websites but can offer the user functionality such as working offline, push notifications, and device hardware access traditionally available only to native applications. This module doesn't sufficiently protect a

MySQL2 for Node Arbitrary Code Injection

CrushFTP VFS Sandbox Escape Vulnerability

Apache HugeGraph-Server Improper Access Control Vulnerability

@andrei-tatar/nora-firebase-common Prototype Pollution vulnerability

Keras code injection vulnerability

llama-index-core Command Injection vulnerability

mlflow vulnerable to Path Traversal

Insecure deserialization in BentoML

Directory traversal in zenml

AWS Amplify CLI has incorrect trust policy management

OpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack

Palo Alto Networks PAN-OS Command Injection Vulnerability

Mautic vulnerable to stored cross-site scripting in description field

mysql2 Remote Code Execution (RCE) via the readCodeFor function

WWBN AVideo Remote Code Execution

Transformers Deserialization of Untrusted Data vulnerability

llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution

LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint

Aim Web API vulnerable to Remote Code Execution

Gradio allows users to access arbitrary files

Magento Open Source allows Improper Input Validation

yt-dlp: `--exec` command injection when using `%q` in yt-dlp on Windows (Bypass of CVE-2023-40581)

MailDev Remote Code Execution

pgAdmin Remote Code Execution (RCE) vulnerability

D-Link Multiple NAS Devices Command Injection Vulnerability

D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability

Gleez Cms Server Side Request Forgery (SSRF) vulnerability

aliyundrive-webdav vulnerable to Command Injection

Lektor does not sanitize database path traversal

@thi.ng/paths Prototype Pollution vulnerability

Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder

GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace

Jupyter Server Proxy's Websocket Proxying does not require authentication

Server crashes on invalid Cloud Function or Cloud Job name

Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

Airflow-Diagrams v2.1.0 was discovered to contain an arbitrary file upload vulnerability in the unsafe_load function at cli.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted YML file.

Fortinet FortiClient EMS SQL Injection Vulnerability

NextChat has full-read SSRF and XSS vulnerability in /api/cors endpoint

pgAdmin 4 vulnerable to Unsafe Deserialization and Remote Code Execution by an Authenticated user

PaddlePaddle Path Traversal vulnerability

PaddlePaddle vulnerable to remote code execution

HTTP Handling Vulnerability in the Bare server