6 matches found
CVE-2026-53519
Lab CVE-2026-53519 - Nezha Dashboard 预认证路径遍历 本 Lab 复现 Nezha Dashboard 中的 通过/dashboard.. 前缀混淆实现的预认证路径遍历 漏洞， 导致 jwtsecretkey 泄露 - 伪造 JWT - 夺取管理员权限。 Docker 环境，按版本进行 A/B 分离以对比 漏洞版 vs 已修补版 。 | 镜像| URL（回环）| 预期结果 ---|---|---|--- 漏洞版| ghcr.io/nezhahq/nezha:v2.0.12| http://127.0.0.1:9090| 泄露...
Exploit for CVE-2026-53519
Lab CVE-2026-53519 - Nezha Dashboard pre-auth path traversal...
Exploit for Incorrect Authorization in Heinlein Opencloud_Reva
CVE-2026-23989 — OpenCloud / ownCloud Infinite Scale public-li...
GHSA-86CX-WWF4-PHQ4 OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API
Summary An authorization bypass vulnerability exists in the file sharing mechanism of Openlist. Due to a flawed, non-separator-aware path validation check, an authenticated user can create share links for files outside their restricted base directory. This allows an attacker to bypass tenant/user...
php: URL decoding of cookie names can lead to different interpretation of cookies between browser and server
In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like Host confused with cookies that decode to such prefix, thus leading to an attacker being...
