Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' through the Accessory model mass assignment process. An attacker can...

shopper 安全漏洞

Shopper is an open-source e-commerce management backend developed by Shopper Labs. Versions of Shopper prior to 2.8.0 contained security vulnerabilities. These vulnerabilities stemmed from the Livewire component in the product editor, which lacked authorization for the store method. Any...

EUVD-2022-29202

Malicious code in bioql PyPI...

CVE-2022-24301

In Minetest before 5.4.0, players can add or subtract items from a different player's inventory...

Design/Logic Flaw

In Minetest before 5.4.0, players can add or subtract items from a different player's inventory...

CVE-2022-24301

In Minetest before 5.4.0, players can add or subtract items from a different player's inventory...

Minetest 安全漏洞

Minetest is a free open source voxel game engine by The Minetest Team team. It is used for module and game creation. A security vulnerability exists in minetest that stems from the ability to add or remove items from different users' inventories...