heisenberg-ssc-gha

Heisenberg Dependency Health Check GitHub Action A lightweight PR guardrail for dependency updates. It scans new or changed dependencies only from your lock/manifest, pulls health and risk signals deps.dev + heuristics, flags fresh publishes, comments a report on the PR, optionally labels it for...

SiYuan <= v3.6.1 - Bookmark Data Disclosure

SiYuan v3.6.2 contains an information disclosure vulnerability caused by improper authorization checks in the publish service's bookmark filtering, letting unauthenticated visitors access bookmarked blocks from password-protected documents, exploit requires access to the publish service. id:...

SiYuan <= 3.6.5 - Unauthenticated Path Traversal

SiYuan = 3.6.5 contains a path traversal via double URL-encoding in the /assets/ route publish mode port 6808, allowing unauthenticated attackers to read arbitrary files inside WorkspaceDir including conf/conf.json which exposes the API token and access auth code. id: CVE-2026-54066 info: name:...

SiYuan <=3.7.2 - SQL Injection

SiYuan before v3.7.3 contains a SQL injection caused by direct concatenation of the keyword parameter in /api/filetree/searchDocs endpoint, letting attackers with publish RoleReader token or unauthenticated in publish mode read and modify database content. id: CVE-2026-69085 info: name: SiYuan...

CVE-2026-116788

FreeSWITCH is an open-source software telecommunications platform. Before version 1.11.2, an integer underflow in switchxmldecode can cause an undersized heap allocation when an XML document declares an entity with an empty replacement value. Subsequent copying overruns the allocated buffer. An...

CVE-2026-109405

A flaw was found in conductor. A remote attacker can trigger Server-Side Request Forgery SSRF by supplying a manipulated bootstrap server parameter in a Kafka publish task. This flaw enables the application to initiate unauthorized connections to arbitrary internal or external network resources,...

CVE-2026-116788 FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding

FreeSWITCH is an open-source software telecommunications platform. Before version 1.11.2, an integer underflow in switchxmldecode can cause an undersized heap allocation when an XML document declares an entity with an empty replacement value. Subsequent copying overruns the allocated buffer. An...

CVE-2026-116788

The FreeSWITCH telecommunications platform is vulnerable to a pre-authentication heap buffer overflow in the switch_xml_decode() function. An integer underflow occurs when processing an XML document containing an entity with an empty replacement value, leading to an undersized heap allocation and...

CVE-2026-76826 tsParticles: Generated release notes can execute shell commands in the stable publish workflow

tsParticles is a TypeScript library for creating highly customizable particle animations. From 4.0.0 until 4.3.2, the stable publish workflow interpolates steps.release.outputs.body directly into an echo command in Bash source before writing RAWRELEASE.md. Contributor-controlled shell...

CVE-2026-76826 tsParticles: Generated release notes can execute shell commands in the stable publish workflow

tsParticles is a TypeScript library for creating highly customizable particle animations. From 4.0.0 until 4.3.2, the stable publish workflow interpolates steps.release.outputs.body directly into an echo command in Bash source before writing RAWRELEASE.md. Contributor-controlled shell...

CVE-2026-76826

The tsParticles TypeScript library (versions 4.0.0 through 4.3.2 ) is vulnerable to OS Command Injection (CWE-78) within its stable publish workflow. The vulnerability occurs because the workflow interpolates steps.release.outputs.body directly into a Bash echo command when generating RAW_RELEASE...

PT-2026-135480

Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocumentPublish that allows authenticated members to publish documents into private collections without write access. Attackers can detach a child document via documents.unpublish, retaining parentDocumentId, then...

CVE-2018-11686

CVE-2018-11686 CVE-2018-11686 - FlexPaper PHP Publish Service RCE = 2.3.6 found by Red Timmy Security Technical Analysis: https://www.exploit-db.com/docs/english/46521-flexpaper-=-2.3.6-remote-code-execution-whitepaper.pdf Security advisory: unknow Proof Of Concept: 1. Removing the config files T...

hpfeeds

hpfeeds About hpfeeds is a lightweight authenticated publish-subscribe protocol. It has a simple wire-format so that everyone is able to subscribe to the feeds with their favorite language in almost no time. Different feeds are separated by channels and support arbitrary binary payloads. This mea...

CVE-2026-8054

1. Vulnerability Overview CVE-2026-8054 is a high-severity pre-authentication SQL injection vulnerability Pre-auth SQL Injection in the dotCMS Core Publish Audit API. The vulnerability is officially tracked as Security Incident SI-75 and was formally disclosed at the end of May 2026. Since...

CVE-2026-78165

CVE-2026-78165 — camel-spring-redis: unfiltered JDK deserialization of Redis payloads Runnable proof-of-concept reproducer for the Apache Camel vulnerability where camel-spring-redis, when no serializer option is configured, built a bare JdkSerializationRedisSerializer with...

CVE-2026-68004

CVE-2026-68004：SRS Unauthenticated RTMP Publish Overview This repository contains the technical report and proof-of-concept for CVE-2026-68004, an unauthenticated RTMP publish issue in OSSRS / SRS deployments where vhost.security is disabled and no other publish authentication is configured. File...

pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI

Summary The pypi-publish actionpypi-publish versions before 1.14.2 used to bundle the emSign root CA trust store certificate through the certifi distribution. It has since been removed through the bundle and the new version no longer includes them. pypi-publish:...

GHSA-5XJX-3W67-W9X9 pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI

Summary The pypi-publish actionpypi-publish versions before 1.14.2 used to bundle the emSign root CA trust store certificate through the certifi distribution. It has since been removed through the bundle and the new version no longer includes them. pypi-publish:...

CVE-2024-50335

CVE-2024-50335: Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation Summary The "Publish Key" field in SuiteCRM's Edit Profile page is vulnerable to Reflected Cross-Site Scripting XSS, allowing an attacker to inject malicious JavaScript code. This can be...