90768 matches found
DEBIAN-CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
CVE-2024-2074
Este repositorio no tiene un README...
CVE-2025-59287
This repository does not have a README...
CVE-2026-31431
This repository does not have a README...
CVE-2026-12956
The WP Event Solution Eventin plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 4.1.22 via the createitem handler for the /wp-json/eventin/v2/orders REST endpoint. The endpoint's createitempermissionscheck function only verifies a wprest nonce which is...
asdsadsadasdasdsadsad
Este repositorio no tiene un README...
advisory001
This repository does not have a README...
SG-2026-0013
This repository does not have a README...
CVE-2025-57298
Stored XSS via Renderizado Inseguro de Markdown en Kotaemon Resumen Kotaemon es un sistema de preguntas y respuestas sobre documentos basado en RAG Generación Aumentada por Recuperación de código abierto que proporciona una interfaz web para consultar documentos subidos como PDF, Word y archivos...
CVE-2026-73292
CVE-2026-73292 – Semaphore UI 仅供教育和负责任披露之用。 该漏洞已在 GHSA-8cj9-r88m-8945 中报告，影响 2.18.21 以下的 semaphoreui 版本。 漏洞 Semaphore UI 的密码更改端点未实现任何 CSRF 保护： 无需 CSRF 令牌 无需当前密码确认 身份验证仅依赖会话 Cookie（semaphore），且未强制执行 SameSite 恶意页面可以静默更改任何访问它的已认证用户的密码。 受影响端点： POST /api/users/id/password root@kitploit: "password":...
CVE-2020-1938
This repository does not have a README...
CVE-2026-44578
CVE-2026-44578 — Next.js WebSocket Upgrade Handler SSRF Lab Security Academy CERT Project vulnerability reproduction lab environment for mentor demos Overview...
CVE-2019-3396
Este repositorio no tiene un README...
CVE-2025-67303
В этом репозитории нет README...
cve-2019-48814
This repository does not have a README...
EUVD-2026-74565
The WP Event Solution Eventin plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 4.1.22 via the createitem handler for the /wp-json/eventin/v2/orders REST endpoint. The endpoint's createitempermissionscheck function only verifies a wprest nonce which is...
CVE-2026-12956 Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter
The WP Event Solution Eventin plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 4.1.22 via the createitem handler for the /wp-json/eventin/v2/orders REST endpoint. The endpoint's createitempermissionscheck function only verifies a wprest nonce which is...
CVE-2026-12956
The WP Event Solution (Eventin) WordPress plugin (versions ≤ 4.1.22 ) is affected by a Missing Authorization vulnerability in the /wp-json/eventin/v2/orders REST endpoint. The create_item_permissions_check() function relies solely on a wp_rest nonce that is leaked to every visitor via the etn-pub...