357121 matches found
CVE-2026-107718 AdonisJS: Unencoded route parameters can produce open redirects
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...
CVE-2026-107718
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...
Exploit for Path Traversal in Apache Http_Server
Apache HTTP Server 2.4.50 Path Traversal and RCE CVE-2021-420...
Server-Side Template Injection
Handlebars is vulnerable to Server-Side Template Injection SSTI. The vulnerability is due to improper enforcement of prototype-access restrictions in lookupProperty, which allows an attacker to bypass the deny list, access the Function constructor through a controlled template, and execute...
GHSA-477H-4R7F-FVRX vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, nextcloud-server...
CVE-2026-102414 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, nextcloud-server...
GHSA-477H-4R7F-FVRX vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-102414 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
Exploit for CVE-2020-11651
SaltStack Master Authentication Bypass CVE-2020-11651 Vulh...
Exploit for CVE-2020-14882
Oracle WebLogic Console Pre-Auth RCE CVE-2020-14882, CVE-2020...
CVE-2025-55182-TOOLS
CVE-2025-55182 Exploit Tool CVE-2025-55182 Comprehensive Exploitation/Detection Tool Developed byMingYi Security Lab Features Vulnerability Detection : Batch scan multiple targets for the vulnerability Path Scanning : Scan common Server Action endpoints to discover vulnerable paths Remote Code...
CVE-2025-55182-scanner
🔍 CVE-2025-55182-scanner - Detect Vulnerabilities with Ease Download CVE-2025-55182-scanner 🚀 Getting Started Welcome! This guide will help you download and run the CVE-2025-55182-scanner. This tool identifies exposed React Server Components endpoints in your applications without being intrusive....
USN-8910-1 libxml2 vulnerabilities
Yirou Yang discovered that libxml2 incorrectly handled certain XML catalogs. If a user or automated system was tricked into processing a specially crafted XML catalog, an attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial of service. CVE-2026-76781 It was...
curl: HTTP/1.1 connection reuse returns unsolicited server data as the next request's response (regression in 8.22.0)
Since 8.22.0 libcurl reuses an idle HTTP/1.1 connection that already has unread bytes waiting on it, as long as the pool health check ran less than a second ago, and those bytes are then returned as the response to the next request sent on that connection, so every later response on it is shifted...
Important: Red Hat Security Advisory: bind security update
An update for bind is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Security Bulletin: IBM i is Affected By Relative Path Traversal Vulnerability in OpenSSH [CVE-2026-59995]
Summary IBM i is vulnerable to not properly constraining the location of downloaded files when "sftp server:/path" is used CVE-2026-59995 in OpenSSH as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-59995 DESCRIPTION: sftp in OpenSSH before 10.4 does not...
DEBIAN-CVE-2026-107698
FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ffrtspconnect in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL. Malicious RTSP servers can redirect FFmpeg to internal hosts and ports under other schemes,...
CVE-2026-107698
FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ffrtspconnect in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL. Malicious RTSP servers can redirect FFmpeg to internal hosts and ports under other schemes,...
CVE-2026-107362
Malcolm file-upload component ships the upstream FilePond PHP server pqina/filepond-server-php largely unmodified: Dockerfile copies all upstream .php files and Malcolm only overwrites config.php and submit.php. Upstream index.php exposes a fetch API route that instructs the server to download an...
CVE-2026-107698
FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ffrtspconnect in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL. Malicious RTSP servers can redirect FFmpeg to internal hosts and ports under other schemes,...