CVE-2026-58451 Horde IMP < 7.0.1 Path Traversal via Compose.php img src

Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix in img src URLs. Attackers can bypass the stripos prefix validatio...

CVE-2026-58451 Horde IMP < 7.0.1 Path Traversal via Compose.php img src

Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix in img src URLs. Attackers can bypass the stripos prefix validatio...

CVE-2026-58451 Horde IMP < 7.0.1 Path Traversal via Compose.php img src

Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix in img src URLs. Attackers can bypass the stripos prefix validatio...

CVE-2026-27955 Coolify: Command Injection via Single-Quote Breakout in `executeInDocker()`

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, the executeInDocker helper wraps commands in bash -c '$command' without escaping single quotes. User-controlled dockercomposecustombuildcommand and...

EUVD-2026-40332

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, the executeInDocker helper wraps commands in bash -c '$command' without escaping single quotes. User-controlled dockercomposecustombuildcommand and...

CVE-2026-13504

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...

CVE-2026-13504 code-projects Project Management System Mail Compose mail.php cross site scripting

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...

EUVD-2026-40002

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...

CVE-2026-13504

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...

CVE-2026-13504 code-projects Project Management System Mail Compose mail.php cross site scripting

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...

CVE-2026-13504: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...

PT-2026-53115

Name of the Vulnerable Software and Affected Versions code-projects Project Management System version 1.0 Description Cross site scripting XSS occurs in the Mail Compose Page component within the /mail.php endpoint. This issue allows a remote attacker to execute malicious scripts through the...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: terraform-provider-acme-fips, coder-fips, crossplane-provider-aws-athena-fips, nemo, crossplane-provider-aws-organizations, commercial-expanso-edge, crossplane-provider-aws-chime, knative-kafka-broker, crossplane-provider-aws-sqs-fips, cloudflared-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme-fips, coder-fips, crossplane-provider-aws-athena-fips, nemo, crossplane-provider-aws-organizations, commercial-expanso-edge, crossplane-provider-aws-chime, knative-kafka-broker, crossplane-provider-aws-sqs-fips, cloudflared-fips,...

GO-2026-5308 Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend

Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend...

GO-2026-5340 Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets) in github.com/getarcaneapp/arcane/backend

Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content incl. .env secrets in github.com/getarcaneapp/arcane/backend...

cerberus-redteam

Agent Autonome de Red Teaming Guidé par LLM et MITRE ATT&CK...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: kube-mgmt, linkerd2, livekit-cli, eksctl, helm-mapkubeapis, helm-operator, datadog-agent, neuvector-scanner-fips, rancher, kgateway-fips, helmfile, harvester-fips, chaos-mesh, syft, kubevela, buildkitd-fips, chainctl, steampipe, neuvector-scanner, cloudbeat-fips,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: kube-mgmt, livekit-cli, eksctl, helm-mapkubeapis, helm-operator, datadog-agent, neuvector-scanner-fips, rancher, kgateway-fips, helmfile, harvester-fips, chaos-mesh, syft, kubevela, buildkitd-fips, chainctl, steampipe, neuvector-scanner, cloudbeat-fips, skaffold,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: kube-mgmt, linkerd2, livekit-cli, eksctl, helm-mapkubeapis, helm-operator, datadog-agent, neuvector-scanner-fips, rancher, kgateway-fips, helmfile, harvester-fips, chaos-mesh, syft, kubevela, buildkitd-fips, chainctl, steampipe, neuvector-scanner, cloudbeat-fips,...