20 matches found
TCL-xss-Labs
XSS Lab โ ่ตๅ่ดฆ็ฐฟ ๐ธ ๅฆๆ่ฟไธช้กน็ฎๅฏนไฝ ๆๅธฎๅฉ๏ผๅฏไปฅ่่ๆ่ต 10็พๅ ๆฏๆๅฎๅๅฑใ้พๆฅ๏ผhttps://rzp.io/rzp/zgkC6h5B ไธไธชไบคไบๅผใ่ชๆ็ฎก็ XSS ่ฎญ็ปๅนณๅฐ ๏ผๅ ๅซ 33 ไธช้ๆญฅๅ็บง็ๆๆ โโ ไธไธบ้ปๅฎขใๆธ้ๆต่ฏไบบๅๅๅผๅ่ ่ฎพ่ฎก๏ผ่ฎฉไฝ ไปๅบ็กๅฐ็ๅฎไธ็ๅฉ็จๅ จ้ขๆๆก่ทจ็ซ่ๆฌๆปๅปใ โก ไธบๆปๅป่ ๆ้ โก ไธบๅญฆไน ่ฎพ่ฎก โก ไธบ็ฎๆดๆๅปบ ๅ Node.js ๆๅกๅจ ๆ ้ๆฐๆฎๅบ ๆ ้ๆๅปบๆญฅ้ชค ๅฎๅ จ Docker ๅ๏ผไธ้ฎ้จ็ฝฒ ๆๆ 33 ไธช้ๆญฅๅ็บง็ XSS ๆๆ๏ผไปๅบ็กๅๅฐๅๅฐ้ซ็บง็ๅฎไธ็ๅฉ็จใ ๐ข ็ฎๅ...
xalgorix v4.6.72
Xalgorix โ Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported โ so you get proof, not a pile of maybes to triage...
CVE-2026-54021
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, several direct, index-addressed Ollama proxy routes accept a caller-supplied urlidx path parameter and use it as a raw index into the admin-configured OLLAMABASEURLS list. Access...
EUVD-2026-30618
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the type: "file" non-full-context, type: "text" with collectionname, and bare collectionname/collectionnames paths in the getsourcesfromitems function perform vector store queries...
PT-2026-27445
Name of the Vulnerable Software and Affected Versions Vikunja versions 0.18.0 through 2.2.0 Description Vikunja is a self-hosted task management platform. When a user account is disabled or locked, the status check is only enforced on the local login and JWT token refresh paths. The API tokens,...
CVE-2026-28274
Initiative is a self-hosted project management platform. Versions of the application prior to 0.32.4 are vulnerable to Stored Cross-Site Scripting XSS in the document upload functionality. Any user with upload permissions within the "Initiatives" section can upload a malicious .html or .htm file ...
EUVD-2026-8921
Initiative is a self-hosted project management platform. An access control vulnerability exists in Initiative versions prior to 0.32.2 where uploaded documents are served from a publicly accessible /uploads/ directory without any authentication or authorization checks. Any uploaded file can be...
CVE-2026-28276 Initiative Allows Unauthenticated Access to Uploaded Documents via Public /uploads/ Endpoint
Initiative is a self-hosted project management platform. An access control vulnerability exists in Initiative versions prior to 0.32.2 where uploaded documents are served from a publicly accessible /uploads/ directory without any authentication or authorization checks. Any uploaded file can be...
EUVD-2026-8814
Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability existed in Agenta's custom code evaluator. Agenta used RestrictedPython as a sandboxing mechanism for user-supplied evaluator code, but incorrectly whitelisted the numpy package ...
EUVD-2026-4905
Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, a hardcoded credential in the provided installation script located at https://dokploy.com/install.sh, line 154 uses a hardcoded password when creating the database container. This means that nearly all Dokpl...
CVE-2026-24839 Dokploy has a clickjacking vulnerability - Missing X-Frame-Options and CSP frame-ancestors headers
Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, the Dokploy web interface is vulnerable to Clickjacking attacks due to missing frame-busting headers. This allows attackers to embed Dokploy pages in malicious iframes and trick authenticated users into...
EUVD-2021-25597
Malware in sbrugna...
EUVD-2024-45922
Malicious code in bioql PyPI...
EUVD-2023-32473
Malicious code in bioql PyPI...
EUVD-2023-29712
Malicious code in bioql PyPI...
EUVD-2022-29653
Malicious code in bioql PyPI...
EUVD-2025-8631
Malicious code in bioql PyPI...
Nextcloud Authorization Issues Vulnerability (CNVD-2025-11222)
Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud suffers from an authorization issue vulnerability that originates when an attacker gains access to a user or administrator session to create, change...
CVE-2024-52509 Nextcloud Mail app does not respect download permissions in shares
Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. The Nextcloud mail app incorrectly allowed attaching shared files without download permissions as attachments. This allowed users to send them the files to themselves and then downloading it from their mail clients...
Nextcloud Mail Access Control Error Vulnerability
Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An access control error vulnerability exists in Nextcloud Mail that stems from a lack of permission checking in Nextcloud Mail.Nextcloud Mail version 1.9.5 an...