CVE-2020-13925

CVE-2020-13925 Развертывание окружения Следуйте https://github.com/apache/kylin для развертывания окружения с помощью Docker, измените версию на 3.0.1 уязвимая версия. Можно удалить 【-m 8G \ 】 — он задает выделение памяти. Затем перейдите по http://host:7070/kylin/login. Имя пользователя и пароль...

certPinningVulnerableOkHttp

Application simple-client OkHttp vulnérable à CVE-2016-2402 Ceci est un fork du simple-client par défaut du projet okhttp. Simple-client est une application Java qui effectue simplement une requête GET vers https://api.github.com et récupère les noms des contributeurs d'okhttp. Ce fork a été...

Flowise < 3.0.1 - Remote Command Execution

The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls RBAC. Furthermore, in Flowise versions before 3.0.1 the...

CTF_CVE-2020-7471

DOBBYISFREE! CTF: 2020 Christmas CTF Bereich: WEB Stichwort: DOBBYISFREE! Schwierigkeitsgrad: ★★★☆☆ Hintergrund Da Web-Hacker normalerweise hauptsächlich SQL Injection auf MySQL studieren, habe ich diese Injection-Herausforderung mit PostgreSQL erstellt, damit sie auch Angriffe auf verschiedene...

CLSA-2026-1784769538 TuxCare security update for fast-uri (1 CVE)

TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.0.1-tuxcare.2...

CLSA-2026-1781744118 TuxCare security update for fast-uri (4 CVEs)

TuxCare rebuilt fast-uri to address 4 CVEs. Fixed in 3.0.1-tuxcare.1...

CLSA-2026-1776818188 TuxCare security update for cross-spawn (4 CVEs)

TuxCare rebuilt cross-spawn to address 4 CVEs. Fixed in 3.0.1-tuxcare.1...

WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin JetReviews versions = 3.0.1...

K000162436: Spring Web Flow vulnerability CVE-2026-40985

Security Advisory Description Applications that configure the WebFlowELExpressionParser are vulnerable to the use of malicious Unified EL expressions. Affected versions: Spring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through 2.5.1. CVE-2026-40985 Impact There is no impact; F5 products are not...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @middy/validator (>=5.4.3, <=5.4.4) +5 more potentially affected by CVE-2026-13676 via fast-uri (>=3.0.1, <=3.1.2)

fast-uri NPM version =3.0.1, =0.3.1, =5.4.3, =1.0.0, =1.0.0, =1.25.0, =2.2.0, =2.3.1 Source cves: CVE-2026-13676 Source advisory: OSV:GHSA-4C8G-83QW-93J6...

PT-2026-61662

Name of the Vulnerable Software and Affected Versions Mettle SendPortal versions prior to 3.0.2 Description A stored cross-site scripting XSS issue exists in the template management functionality. The application does not properly sanitize user-supplied input in the content parameter of the...

CVE-2026-61975

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through = 3.0.1...

EUVD-2026-43441

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through = 3.0.1...

CVE-2026-61975

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through = 3.0.1...

CVE-2026-61975

CVE-2026-61975 affects the WordPress JetReviews plugin (Crocoblock) up to version 3.0.1. The issue is Exposure of Sensitive System Information to an Unauthorized Control Sphere, allowing retrieval of embedded sensitive data from JetReviews. The NVD entries describe the vulnerability but do not pr...

EUVD-2026-42846

The Easy Upload Files During Checkout plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.0.1. This is due to missing authorization checks in the ufdccustominit function, which processes the 'eufdc-delete' parameter without any nonce verification,...

CVE-2026-15192

A vulnerability has been found in mettle sendportal up to 3.0.1. This issue affects the function sendgrid/postmark/postal/mailjet of the component APIv1 Webhooks. The manipulation leads to missing authentication. The attack is possible to be carried out remotely. The exploit has been disclosed to...

CVE-2026-15192

CVE-2026-15192 affects mettle SendPortal up to version 3.0.1, targeting APIv1 Webhooks. The vulnerability involves the sendgrid/postmark/postal/mailjet functions, with missing authentication reported as remotely exploitable. Public disclosure and PoC–level exploit maturity are indicated, but no e...

CVE-2026-60102 Horde VFS < 3.0.1 OS Command Injection via Horde_Vfs_Smb Driver

Horde Virtual File System VFS API before 3.0.1 contains an OS command injection vulnerability in the HordeVfsSmb driver where the escapeShellCommand method fails to sanitize command substitution sequences, allowing authenticated attackers to inject arbitrary shell commands through user-controlled...

NPM: auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopback

NPM: auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopback vulnerability discovered by ? in WordPress Npm auth-fetch-mcp versions = 3.0.1...