Leantime < 2.4 - Authenticated SQL Injection

Leantime is an open source project management system. A 'userId' variable in app/domain/files/repositories/class.files.php is not parameterized. An authenticated attacker can send a carefully crafted POST request to /api/jsonrpc to exploit an SQL injection vulnerability. Confidentiality is impact...

Microsoft FrontPage Extensions - Information Disclosure

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory. id: CVE-2000-0114 info: name: Microsoft FrontPage Extensions - Information Disclosure author: r3naissance,matejsmycka severity...

cve-2010-3333

Questo repository non contiene un README...

CVE-2026-62862

creationtimestamp| type| source ---|---|--- 2026-08-26 00:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtx237f5qa24 2026-08-26 01:25:23+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtx6fxkvpy2i 2026-08-26 01:40:05+00:00| seen|...

WS_FTP-CVE-2023-40044

WSFTP-CVE-2023-40044 Repository con tutto ciò che ho per tracciare l'impatto di WSFTP CVE-2023-40044 Include organizzazioni e domini potenzialmente interessati che utilizzano metodi header. Ho anche creato un news ticker che tiene traccia delle nuove notizie su MOVEit e WSFTP, disponibile su...

MOVEit-CVE-2023-34362

MOVEit-CVE-2023-34362 Repository con tutto ciò che ho per tracciare l'impatto di MOVEit CVE-2023-34362 Include organizzazioni e domini potenzialmente colpiti, utilizzando metodi di scoperta tramite header SFTP e cookie. Ho anche creato un ticker di notizie che tiene traccia delle nuove storie su...

CVE-2026-79912

creationtimestamp| type| source ---|---|--- 2026-08-26 00:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwzpwfn6i2r 2026-08-26 01:25:26+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtx6g2uyyj2r...

libwireshark19-4.6.8-2.1 on GA media (moderate)

libwireshark19-4.6.8-2.1 on GA media Announcement ID: openSUSE-SU-2026:11579-1 Rating: moderate Cross-References: CVE-2026-19694 CVE-2026-19695 CVE-2026-19696 CVE-2026-76879 CVE-2026-76880 CVE-2026-76881 CVE-2026-76882 CVE-2026-76883 CVE-2026-76884 CVE-2026-76885 CVE-2026-76886 CVE-2026-76887...

CVE-2022-26134

Este repositorio nao tem um README...

CVE-2024-21689

CVE-2024–21689 RCE in Bamboo Data Center und Server Atlassian CVSS-Wert - 7.6 🔥 Beschreibung Diese als hoch eingestufte RCE-Schwachstelle Remote Code Execution CVE-2024-21689 wurde in den Versionen 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 und 9.6.0 von Bamboo Data Center und Server eingeführt. Diese...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.10 security update

Red Hat multicluster engine for Kubernetes v2.8 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base scor...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.11.6 security update

Red Hat multicluster engine for Kubernetes v2.11 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...

CVE-2026-62861

TypeBot (chatbot builder) is vulnerable to cross-tenant custom-domain removal prior to 3.18.0 . The root cause is in the custom-domain delete handler (handleDeleteCustomDomain.ts): it authorizes a caller against a client-supplied workspaceId but forwards the client-supplied domain name to the sha...

DEBIAN-CVE-2026-63072

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.10 security update

Red Hat multicluster engine for Kubernetes v2.8 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base scor...

EUVD-2026-36714

AshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching...

CVE-2024-58377

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the...

EUVD-2024-55731

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the...

CVE-2024-58377 Nokogiri before 1.16.5 libxml2 Dependency Update

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the...

CVE-2024-58377

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6 , which inherits CVE-2024-34459 in libxml2's xmllint tool. The fix in 1.16.5 upgrades the bundled libxml2 to 2.12.7. Per the maintainers, there is no practical impact to Nokogiri users because Nokogiri does not provide or expose the xmllint bi...