CVE-2026-110845

The automation platform n8n versions before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 is vulnerable to code execution within the Git node Log operation . The root cause is the failure to strip a repository's local git configuration before invoking an external program. Authenticated me...

Transfer ETH by using transfer() may cause this transaction to fail

Lines of code Vulnerability details Impact Transfer ETH by using transfer may cause this transaction to fail. In EIP-1884: In many cases, a recipient of ether from a CALL will want to issue a LOG. The LOG operation costs 375 plus 375 per topic. If the LOG also wants to do an SLOAD, this change ma...

TinyShop修复不当再次注入（全版本）

简要描述： 在修复http://www.wooyun.org/bugs/wooyun-2014-068153漏洞时候，处理不当，治标不治本。 详细说明： public static function getIP if isset$SERVER"HTTPXFORWARDEDFOR"$ip = $SERVER"HTTPXFORWARDEDFOR"; elseif isset$SERVER"HTTPCLIENTIP" $ip = $SERVER"HTTPCLIENTIP"; elseif isset$SERVER"REMOTEADDR" $ip = $SERVER"REMOTEADDR";...