CVE-2026-31886

CVE-2026-31886 affects Dagu (workflow engine) prior to 2.2.4. The dagRunId parameter used by inline DAG execution endpoints is passed into filepath.Join without validation, allowing a directory traversal (e.g., ".."). Go’s Join resolves such paths to system temp directories (like /tmp), and a def...

CVE-2026-31886

creationtimestamp| type| source ---|---|--- 2026-03-13 07:11:24+00:00| published-proof-of-concept| https://github.com/dagucloud/dagu/security/advisories/GHSA-m4q3-457p-hh2x 2026-03-14 03:00:46+00:00| seen| https://infosec.exchange/users/offseq/statuses/116225292815973119 2026-03-18 16:00:14+00:00...

CVE-2022-31886

Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery CSRF. An attacker can disable the 2FA by sending the user a malicious form...

CVE-2021-31886

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

WordPress Social proof testimonials and reviews by Repuso plugin <= 5.21 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Thaleikis in WordPress Plugin Social proof testimonials and reviews by Repuso versions = 5.21...

CVE-2025-31886 WordPress Social proof testimonials and reviews by Repuso plugin <= 5.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social proof testimonials and reviews by Repuso: from n/a through = 5.21...

CVE-2025-31886 WordPress Social proof testimonials and reviews by Repuso plugin <= 5.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social proof testimonials and reviews by Repuso: from n/a through = 5.21...

CVE-2022-31886

creationtimestamp| type| source ---|---|--- 2022-06-29 00:36:26+00:00| seen| https://t.me/cibsecurity/45336...

CVE-2022-31886

CVE-2022-31886 affects Marval MSM v14.19.0.12476 and is a Cross Site Request Forgery (CSRF) vulnerability. According to the provided documents, an attacker can disable the user’s 2FA by sending the user a malicious form. The primary impact stated is the potential to bypass/disable two-factor auth...

Nucleus FTP Server Multiple Vulnerabilities (NUCLEUS:13)

Binary data nucleusftpmultiplevulns.nbin...

CVE-2021-31886

creationtimestamp| type| source ---|---|--- 2021-11-10 16:40:00+00:00| seen| https://t.me/truesecator/2305 2023-02-17 10:40:07+00:00| published-proof-of-concept| https://t.me/truesecator/4081 2023-02-17 11:24:26+00:00| published-proof-of-concept| https://t.me/icscert/707...

CVE-2021-31886

Technical details for CVE-2021-31886 (affected software, impact, exploitability, and remediation) are not present in the provided Connected documents. Please monitor for updates.