53905 matches found
ROOT-APP-NPM-CVE-2026-2327 CVE-2026-2327 in markdown-it - Patched by Root
Root has patched CVE-2026-2327 in the markdown-it package for Root:npm. Multiple fixed versions available...
MOVEit Transfer - SQL Injection
In Progress MOVEit Transfer before 2021.0.8 13.0.8, 2021.1.6 13.1.6, 2022.0.6 14.0.6, 2022.1.7 14.1.7, and 2023.0.3 15.0.3, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit...
QNAP QTS and QuTS Hero - OS Command Injection
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later...
WordPress Royal Elementor Addons Plugin <= 1.3.78 - Arbitrary File Upload
Arbitrary File Upload vulnerability in WordPress Royal Elementor Addons Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability has been fixed in version...
Sonatype Nexus Repository Manager 3 - Local File Inclusion
Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. id: CVE-2024-4956 info: name: Sonatype Nexus Repository Manager 3 - Local File Inclusion author: ritikchaddha severity: high description: | Path Traversal in Sonatype...
Atom CMS v2.0 - SQL Injection
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php. id: CVE-2022-24223 info: name: Atom CMS v2.0 - SQL Injection author: theamanrawat severity: critical description: | AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...
Next.js-Proof-of-Concept
Next.js CVE Proof of Concept This repository contains reproducible proof-of-concept environments for three Next.js vulnerabilities. Each PoC includes a vulnerable target, a fixed target, and a script that demonstrates the behavioral difference between the two. The goal of this project is to make...
ets5-password-recovery
ETS5 Password Recovery Tool Table of Contents Introduction Installation Requirements How does the password recovery work? How was the design flaw discovered? How can the risk be mitigated? Coordinated Vulnerability Disclosure License Change log Introduction Have you forgotten the password to one ...
CVE-2026-79981
The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured server when the resolver context is initialised dnsresolveinitlocked - registerdispatcher - dnsdispatcherregister, with the local port left at 0 so the stack picks an ephemeral port exactly once. dnswrite th...
ROOT-APP-MAVEN-AIKIDO-2026-11158 AIKIDO-2026-11158 in org.springframework:spring-core - Patched by Root
Root has patched AIKIDO-2026-11158 in the org.springframework:spring-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-27148 CVE-2026-27148 in storybook - Patched by Root
Root has patched CVE-2026-27148 in the storybook package for Root:npm. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-41080 CVE-2026-41080 in expat - Patched by Root
Root has patched CVE-2026-41080 in the expat package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-24051 CVE-2026-24051 in go.opentelemetry.io/otel/sdk - Patched by Root
Root has patched CVE-2026-24051 in the go.opentelemetry.io/otel/sdk package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-39883 CVE-2026-39883 in go.opentelemetry.io/otel/sdk - Patched by Root
Root has patched CVE-2026-39883 in the go.opentelemetry.io/otel/sdk package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2025-22868 CVE-2025-22868 in golang.org/x/oauth2 - Patched by Root
Root has patched CVE-2025-22868 in the golang.org/x/oauth2 package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-1229 CVE-2026-1229 in github.com/cloudflare/circl - Patched by Root
Root has patched CVE-2026-1229 in the github.com/cloudflare/circl package for Root:Go. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-47273 CVE-2025-47273 in setuptools - Patched by Root
Root has patched CVE-2025-47273 in the setuptools package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2022-40897 CVE-2022-40897 in setuptools - Patched by Root
Root has patched CVE-2022-40897 in the setuptools package for Root:PyPI. Multiple fixed versions available...