Advisory Catalog

Veramo is Vulnerable to SQL Injection in Veramo Data Store ORM

CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting

Dask Distributed is Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard

Nu Html Checker (vnu) contains a Server-Side Request Forgery (SSRF) vulnerability

Pepr Has Overly Permissive RBAC ClusterRole in Admin Mode

svelte vulnerable to Cross-site Scripting

Pimcore Web2Print Tools Bundle "Favourite Output Channel Configuration" Missing Function Level Authorization

Pimcore's Admin Classic Bundle is Missing Function Level Authorization on "Predefined Properties" Listing

Pimcore is Vulnerable to Broken Access Control: Missing Function Level Authorization on "Static Routes" Listing

Algolia Search & Discovery for Magento 2 Has Untrusted Data Handling

pH7-Social-Dating-CMS affected by a stored cross-site scripting (XSS) vulnerability

This module enables Drupal sites to authenticate users via Microsoft Entra ID (formerly Azure AD) using OAuth 2.0. The module doesn't sufficiently validate API responses from Microsoft allowing complete account takeover of any user, including site administrators, without requiring any credentials o

This module integrates the AT Internet Piano Analytics service. The module does not filter administrator-entered text leading to a persistent Cross-site Scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer pian

This module integrates the AT Internet SmartTag service. The module does not filter administrator-entered text leading to a persistent Cross-site Scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer atsmarttag"

This module enables allows group managers to invite people into their group. The module doesn't sufficiently check access under certain circumstances, allowing unauthorized users to access the group's content. This vulnerability is mitigated by the fact that it only occurs when certain uncommon ac

BlackSheep's ClientSession is vulnerable to CRLF injection

Concrete5 CMS contains an XPath injection vulnerability

Outray cli is vulnerable to race conditions in tunnels creation

Outray has a Race Condition in the cli's webapp

Quill is vulnerable to XSS via HTML export feature

tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability

Microsoft Windows Information Disclosure Vulnerability

n8n: Webhook Node IP Whitelist Bypass via Partial String Matching

TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool

TYPO3 CMS Allows Broken Access Control in Redirects Module

TYPO3 CMS Allows Broken Access Control in Edit Document Controller

hermes's raw options logging may disclose secrets passed in via subcommand options argument

Weblate wlc has insecure API key configuration

Weblate command-line client susceptible to SSL verification skip

virtualenv Has TOCTOU Vulnerabilities in Directory Creation

filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock

October CMS Vulnerable to Stored XSS via Branding Styles

October CMS Vulnerable to Stored XSS via Editor and Branding Styles

Ghost has SSRF via External Media Inliner

Elliptic Uses a Cryptographic Primitive with a Risky Implementation

React Router has CSRF issue in Action/Server Action Request Processing

React Router has unexpected external redirect via untrusted paths

Werkzeug safe_join() allows Windows special device names with compound extensions

Kirby is missing permission checks in the content changes API

NiceGUI has Redis connection leak via tab storage causes service degradation

NiceGUI apps are vulnerable to XSS which uses `ui.sub_pages` and render arbitrary user-provided links

NiceGUI is vulnerable to XSS via Unescaped URL in ui.navigate.history.push() / replace()

records-mover Injection vulnerability

CoreShop Vulnerable to SQL Injection via Admin Reports

n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.3, an open redirect vulnerability exists in the OpenCTI platform's SAML authentication endpoint (/auth/saml/callback). By manipulating the RelayState parameter, an attacker can f

Directus has open redirect in SAML

Bokeh server applications have Incomplete Origin Validation in WebSockets

MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download

Pterodactyl TOTPs can be reused during validity window