30386 matches found
BUUCTF-Web-Writeups
BUUCTF-Web-Writeups A collection of CTF Web challenges writ...
opa v1.20.2
Open Policy Agent Open Policy Agent OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. OPA is proud to be a graduated project in the Cloud Native Computing Foundation CNCF landscape. For details read the CNCF...
CVE-2026-46636
Twig , a PHP template language, is affected in versions 1.0.0 through 3.27.0 . The vulnerability stems from SecurityPolicy::checkMethodAllowed() unconditionally whitelisting all method calls on Twig\Markup instances. Because Twig\Markup is not final, subclasses inherit this bypass, exposing every...
CVE-2026-75170
Cross-site scripting XSS vulnerability in the /loginController/doLogin endpoint of the HubCore platform version 14.1.1 allows a remote unauthenticated attacker to inject arbitrary JavaScript into the application's response via the language POST parameter...
CVE-2026-73635
A flaw was found in Apache Struts. An unauthenticated remote client can exploit a vulnerability where the framework's localized-text caches grow without bound. This occurs when no fixed locale is configured, and the locale for text lookups is derived from the incoming request. This can lead to th...
CVE-2026-85603
Grav versions before 1.10.55 contain a path traversal vulnerability in the admin plugin's Save As action that fails to validate the language code parameter. An authenticated admin user with admin.pages.create permission can supply directory traversal sequences in the lang POST field to write...
CVE-2026-85603 Grav Admin Plugin Path Traversal via Save As Language Code
Grav versions before 1.10.55 contain a path traversal vulnerability in the admin plugin's Save As action that fails to validate the language code parameter. An authenticated admin user with admin.pages.create permission can supply directory traversal sequences in the lang POST field to write...
EUVD-2026-71026
Grav versions before 1.10.55 contain a path traversal vulnerability in the admin plugin's Save As action that fails to validate the language code parameter. An authenticated admin user with admin.pages.create permission can supply directory traversal sequences in the lang POST field to write...
CVE-2026-85603
Grav versions before 1.10.55 contain a path traversal vulnerability in the admin plugin's Save As action. The root cause is a missing validation of the language code (lang) POST field, allowing an authenticated user with the admin.pages.create permission to inject directory traversal sequences. T...
CVE-2026-85603 Grav Admin Plugin Path Traversal via Save As Language Code
Grav versions before 1.10.55 contain a path traversal vulnerability in the admin plugin's Save As action that fails to validate the language code parameter. An authenticated admin user with admin.pages.create permission can supply directory traversal sequences in the lang POST field to write...
Security update for podman
This update for podman rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...
sshroute v0.2.12
sshroute CI | Code | OpenSpec | Security ---|---|---|--- | | |...
GO-2026-6354 vulnerabilities
Vulnerabilities for packages: teleport-operator-fips, minio-fips, gitlab-runner-fips, gitea, trufflehog-fips, flux-source-controller-fips, flux-fips, skaffold, skaffold-fips, chisel-fips, kubevela, scc-fips, telegraf, peerdb-flow, nuclio-controller-fips, xeol, longhorn-manager-fips,...
CVE-2026-78662 vulnerabilities
Vulnerabilities for packages: teleport-operator-fips, minio-fips, gitlab-runner-fips, gitea, trufflehog-fips, flux-source-controller-fips, flux-fips, skaffold, skaffold-fips, chisel-fips, kubevela, scc-fips, telegraf, peerdb-flow, nuclio-controller-fips, xeol, longhorn-manager-fips,...
GO-2026-6355 vulnerabilities
Vulnerabilities for packages: teleport-operator-fips, minio-fips, gitlab-runner-fips, gitea, trufflehog-fips, flux-source-controller-fips, flux-fips, skaffold, skaffold-fips, chisel-fips, kubevela, scc-fips, telegraf, peerdb-flow, nuclio-controller-fips, xeol, gitlab-rails-ce, rancher-fleet-fips,...
CVE-2026-56855 vulnerabilities
Vulnerabilities for packages: chisel, osv-scanner, gitness, rancher-fleet, grafana-alloy, chezmoi, litestream, gh, opentelemetry-collector, fscrypt, podman, scorecard, snyk-cli, syft, gitlab-runner, apko, tfsec, dagger, external-dns, kots, goreleaser, nfpm, seaweedfs, flux-notification-controller...
GO-2026-6355 vulnerabilities
Vulnerabilities for packages: chisel, osv-scanner, gitness, rancher-fleet, grafana-alloy, chezmoi, litestream, gh, opentelemetry-collector, fscrypt, podman, scorecard, snyk-cli, syft, gitlab-runner, apko, tfsec, dagger, external-dns, kots, goreleaser, nfpm, seaweedfs, flux-notification-controller...
CVE-2026-78662 vulnerabilities
Vulnerabilities for packages: chisel, osv-scanner, gitness, rancher-fleet, grafana-alloy, chezmoi, litestream, gh, opentelemetry-collector, fscrypt, podman, scorecard, snyk-cli, syft, gitlab-runner, apko, tfsec, dagger, external-dns, kots, goreleaser, nfpm, seaweedfs, flux-notification-controller...
GO-2026-6354 vulnerabilities
Vulnerabilities for packages: chisel, osv-scanner, gitness, rancher-fleet, grafana-alloy, chezmoi, litestream, gh, opentelemetry-collector, fscrypt, podman, scorecard, snyk-cli, syft, gitlab-runner, apko, tfsec, dagger, external-dns, kots, goreleaser, nfpm, seaweedfs, flux-notification-controller...