Advisory Catalog

Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read

Craft CMS vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior

Unauthenticated Craft CMS users can trigger a database backup

ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

Bagisto SSTI vulnerability in type parameter can lead to RCE

Bagisto is vulnerable to SSTI via name parameters provided by non-admin low-privilege users

Bagisto has Normal & Blind SSTI from low-privilege user when ordering product

Bagisto has IDOR in Customer Order Reorder Functionality

Bagisto Missing Authentication on Installer API Endpoints

Langflow Missing Authentication on Critical API Endpoints

Signal K Server Vulnerable to Access Request Spoofing

Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package

Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request Flooding

Feast vulnerable to Deserialization of Untrusted Data

FacturaScripts is Vulnerable to Stored Cross-Site Scripting (XSS) via XML File Upload

YOURLS is vulnerable to XSS through JSONP and Callback request parameters

PsiTransfer has Zip Slip Path Traversal via TAR Archive Download

serverless MCP Server vulnerable to Command Injection in list-projects tool

Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.attrgetter

Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.methodcaller

Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length

Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.getlincoef

Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.param_eval

Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval

Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller

phpMyFAQ has unauthenticated config backup download via /api/setup/backup

Picklescan missing detection when calling numpy.f2py.crackfortran.getlincoef

Picklescan Bypasses Unsafe Globals Check using pty.spawn

Picklescan missing detection when calling pty.spawn

FastMCP updated to MCP 1.23+ due to CVE-2025-66416

Self-hosted n8n has Legacy Code node that enables arbitrary file read/write

lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()

n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox

Croogo CMS has a path traversal vulnerability

libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)

Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the ta

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vuln

Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the targ

Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the targe

Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target

Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in th

Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerabilit

Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in

Fedify has ReDoS Vulnerability in HTML Parsing Regex

Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

Kimai contains a SameSite cookie vulnerability

FastAPI Users Vulnerable to 1-click Account Takeover in Apps Using FastAPI SSO

External Control of File Name or Path in Langflow

Langflow vulnerable to Server-Side Request Forgery

MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability