72895 matches found
CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier
facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...
CVE-2026-84702
facefusion through 3.6.1 is vulnerable to a path traversal flaw in the get_job_file_name function (located in facefusion/jobs/job_manager.py), which fails to normalize job identifiers. An attacker can supply traversal sequences in the job identifier parameter via the unauthenticated HTTP API to w...
CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier
facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...
GHSA-VCC3-GHJQ-M6FR vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, kibana, sqlpad, opensearch-dashboards, opensearch-dashboards-fips, wazuh-dashboard, dotstatsuite-supercore, nextcloud-server, kubeflow-pipelines, gitlab-rails-ce-fips, vitess, wazuh-dashboard-fips...
EUVD-2026-69250
DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. It denies polymorphic resolution only for a fixed set of "unsafe base types", and its isSafeSubType method returns true...
CLEANSTART-2026-JJ72716 Security fixes in kubernetes-event-exporter 1.6.1-r1
Package kubernetes-event-exporter version 1.6.1-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...
CLEANSTART-2026-RU71621 Security fixes in grafana 12.4.7-r1
Package grafana version 12.4.7-r1 fixes 10 vulnerabilities: ghsa-r277-6w6q-xmqw, ghsa-jpcw-4wr7-c3vq, ghsa-gcjh-h69q-9w9g, CVE-2026-21728, CVE-2026-28377...
CGA-8GMJ-85G4-HV76
Bulletin has no description...
MINI-V4W6-R46G-FCR3
Bulletin has no description...
CGA-3R3Q-32PX-J86Q
Bulletin has no description...
MINI-52JM-42FP-V64P
Bulletin has no description...
MINI-XGQC-QCJM-Q4WR
Bulletin has no description...
MINI-W987-6VPF-82Q8
Bulletin has no description...
BIT-KIBANA-2026-78581 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Data Modification in Kibana
Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...
MINI-468F-2M4Q-56W6
Bulletin has no description...
MINI-V8X3-V6FC-7MJC
Bulletin has no description...
MINI-898X-9R65-X6GM
Bulletin has no description...
CubeCart 6.7.4 - SQL
Exploit Title: CubeCart 6.7.4 - SQL Bypass in maintenance.index.inc.php Date: 2026-06-08 Exploit Author: Mikail Kocadağ Vendor Homepage: https://www.cubecart.com/ Software Link: https://github.com/cubecart/v6 Vulnerable Version: 6.7.4 Fixed Version: 6.7.5 CVE: CVE-2026-54646 Advisory / References...
