R2S_CVE-2025-55182

CVE-2025-55182 扫描器 用于 CVE-2025-55182 的漏洞扫描器 - Next.js 服务器操作中的远程代码执行。 关于 CVE-2025-55182 严重性: 严重 CVSS 待定 受影响版本: Next.js: 15.x 15.5.7, 16.0.x 16.0.7 React: 19.0.0, 19.1.0, 19.1.1, 19.2.0 影响: 远程攻击者可以在运行易受攻击的 Next.js 应用（启用了服务器操作）的服务器上执行任意代码。该漏洞源于 React 服务器组件协议中对原型污染的不当处理。 修复版本: Next.js: ≥15.5.7 或...

cve-2025-66478

CVE-2025-55182 Este repositorio proporciona un entorno mínimo intencionalmente vulnerable para probar scanners de seguridad contra las recientes vulnerabilidades críticas de RCE que afectan a React Server Components y Next.js. !Warning Esta configuración es intencionalmente vulnerable y nunca deb...

CVE-2026-105316

The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in some of its AJAX actions, which are available to unauthenticated users, before reflecting it back in the response, leading to Reflected Cross-Site Scripting...

CVE-2026-105316 Magee Shortcodes <= 2.1.1 - Reflected XSS via live_preview and magee_create_shortcode Actions

The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in some of its AJAX actions, which are available to unauthenticated users, before reflecting it back in the response, leading to Reflected Cross-Site Scripting...

EUVD-2026-94185

The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in some of its AJAX actions, which are available to unauthenticated users, before reflecting it back in the response, leading to Reflected Cross-Site Scripting...

CVE-2026-94205

A flaw was found in Gitea Actions. When determining whether workflow runs from fork pull requests require approval, Gitea evaluated the identity of the user triggering the event rather than the author of the pull request. Consequently, routine repository maintainer actions, such as adding a label...

trivysupplychainanalysis

多阶段CI/CD供应链攻击的定量分析 一个经过形式化验证、定量重建 的2026年3月Trivy / "TeamPCP" GitHub Actions供应链入侵事件（CVE-2026-33634 ）——在TLA+中建模，由TLC穷举检查，并通过PRISM概率模型检验器量化。 论文中的每一个数字都从这个仓库重新生成。 模型、概率、语料库测量和校准结果均可从源码通过每层一个命令重现。 事件经过与本研究证明的内容 攻击者能够移动一个广泛使用的Action（trivy-action /...

GHSA-RJ75-HQRM-R3GF vulnerabilities

Vulnerabilities for packages: npm, jupyter-base-notebook, actions-runner, langfuse, pulumi, vitess, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, node-red, commercial-gitlab-rails-ee...

CVE-2026-104844 vulnerabilities

Vulnerabilities for packages: npm, jupyter-base-notebook, actions-runner, langfuse, pulumi, vitess, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, node-red, commercial-gitlab-rails-ee...

PT-2026-107398

The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check in one of its AJAX actions, allowing authenticated users with low privileges, such as subscribers, to delete the Frontend Dashboard WordPress plugin before 3.0.0's configured profile and post form fields...

PT-2026-107408

The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in some of its AJAX actions, which are available to unauthenticated users, before reflecting it back in the response, leading to Reflected Cross-Site Scripting...

Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217

Advanced File System turns Drupal's file storage into a manageable, observable and maintainable subsystem. The Advanced Filesystem: Backup submodule does not sufficiently validate certain requests. This may allow an attacker to trick an authenticated user into performing unintended actions throug...

nextjs-CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 React2Shell - Prueba de Concepto PoC de Ejecución Remota de Código RCE en Next.js Vulnerabilidad crítica en las Server Actions de Next.js que permite Ejecución Remota de Código sin autenticación a través de la deserialización del Protocolo React Flight Descripción...

CVE-2026-106462

Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integration credentials and perform operation...

CVE-2026-106459

Backstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstage/plugin-scaffolder-backend-module-sentry package is affected by improper input validation in sentry scaffolder actions. An authenticated internal user who can execute the affected actions may caus...

CVE-2026-106486 Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions

Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder actions did not sufficiently validate...

CVE-2026-106486 Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions

Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder actions did not sufficiently validate...

CVE-2026-95106

Gitea accepted pushed Git trees containing two entries with the same name, which Git's own consistency checks reject. Gitea's web views resolved such a path to the first entry, while git checkout, Gitea Actions, and release archives use the last. A contributor could open a pull request whose diff...

CVE-2026-94205

Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather than the pull request author. For pullrequest activity triggered by a maintainer during ordinary triage, such as adding a label, the run was created without requiring approval,...

CVE-2026-104626

A user who can open a fork pull request can place workflow content with a shared run-level concurrency group into a Gitea Actions run that is awaiting approval. When a later run in that group cancels the blocked job, the run becomes terminal while still marked as needing approval. If a maintainer...