200881 matches found
AnythingLLM - Username Enumeration via Password Recovery
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to commit e287fab56089cf8fcea9ba579a3ecdeca0daa313, the password recovery endpoint returns different error messages depending on whether a username exists, so enabling...
9Router <= 0.4.36 - Unauthenticated RCE
9Router = 0.4.36 middleware only guards 8 explicitly listed routes, leaving /api/cli-tools/ and /api/mcp/ entirely unauthenticated. An attacker can POST to /api/cli-tools/cowork-settings to register a custom MCP plugin with attacker-controlled command and args stored verbatim into globalThis, the...
TinaCMS - Path Traversal
TinaCMS CLI 2.1.8 contains a file system read vulnerability caused by disabled Vite server.fs.strict setting, letting unauthenticated attackers read arbitrary files on the host system, exploit requires access to the dev server. id: CVE-2026-29066 info: name: TinaCMS - Path Traversal author:...
XWiki - Cross-Site Scripting
XWiki is vulnerable to reflected Cross-Site Scripting XSS via the viewer=changes endpoint. The rev2 parameter is not properly sanitised before being rendered in the response, allowing an attacker to inject arbitrary JavaScript. Affects XWiki versions prior to the patched release. id: CVE-2026-401...
Rclone RC - Broken Access Control
Rclone = 1.45.0 and = 1.45.0 and 1.73.5 contains a broken access control vulnerability caused by unauthenticated access to the RC endpoint options/set allowing mutation of global runtime configuration, letting unauthenticated attackers access sensitive administrative functions, exploit requires R...
Frappe Framework < 16.15.0 - Arbitrary File Read via render_include Path Traversal
Frappe is a full-stack web application framework. Versions prior to 15.105.0 and 16.15.0 contain a possible Arbitrary File Read vulnerability via Path Traversal. The issue is resolved in versions 16.15.0, 15.105.0 and above. id: CVE-2026-39352 info: name: Frappe Framework 16.15.0 - Arbitrary File...
Gradio - Open Redirect
Gradio allows an open redirect bypass via URL encoding, enabling attackers to redirect users to malicious sites. This can lead to phishing attacks and loss of trust in the application. id: CVE-2024-8021 info: name: Gradio - Open Redirect author: DhiyaneshDK severity: medium description: | Gradio...
ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API
changedetection.io = 0.50.34 contains a stored cross site scripting caused by insufficient security checks in the Watch update API, letting attackers execute arbitrary JavaScript when users preview malicious links, exploit requires user interaction id: CVE-2025-62780 info: name: ChangeDetection.i...
CVE-2014-3704
このリポジトリには README がありません。...
CVE-2018-8420
CVE-2018-8420...
CVE-2022-29464
CVE-2022-29464 WSO2 は、SOA 関連のインフラストラクチャ、技術フレームワーク、関連ツール、プロセスサーバー、アプリケーションサーバーなどを含む、さまざまな SOA ソリューションを提供するリーディングカンパニーです。 影響範囲 2.2.0 ≤ WSO2 API Manager ≤ 4.0.0 5.2.0 ≤ WSO2 Identity Server ≤ 5.11.0 WSO2 Identity Server Analytics 5.4.0, 5.4.1, 5.5.0, 5.6.0 5.3.0 ≤ WSO2 Identity Server as Key Manager...
vulns
脆弱性レポート HN Security のアドバイザリ。 https://hnsecurity.it/ Solaris HNS-2022-01-dtprintinfo。 Solaris dtprintinfo および libXm/libXpm の複数の脆弱性 CVE-2022-46285, CVE-2023-24039, CVE-2023-24040。 Zyxel HNS-2022-02-zyxel-zysh。 Zyxel zysh の複数の脆弱性 CVE-2022-26531, CVE-2022-26532。 HNS-2025-10-zyxel-fermion。 Zyxel uOS...
CVE-2026-72809
creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:29+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-3mp7-4rh5-jrv9 2026-09-04 09:32:48+00:00| seen| https://gist.github.com/alon710/942448215c158ca42cd356ec66bc6d93...
CVE-2026-72808
creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:27+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-v7ph-r5r6-4jcj 2026-09-04 08:32:32+00:00| seen| https://gist.github.com/alon710/4e3a59a46f5538004facf996eb24fc2d...
CVE-2026-72807
creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-x67c-8pwr-m8g3 2026-09-04 07:31:42+00:00| seen| https://gist.github.com/alon710/428fa3e523bd4efb06d0f15759388e47...
CVE-2026-72806
creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:23+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6mcf-g667-w3qv 2026-09-04 06:33:11+00:00| seen| https://gist.github.com/alon710/fbf800eaf7af09313d5329c1498b751c...
CVE-2026-72804
creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:12+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vpjw-wf5h-cgpq 2026-09-04 04:32:14+00:00| seen| https://gist.github.com/alon710/8322b53a1d7bba7f1109796c874a5f4c...
CVE-2026-72802
creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:08+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jv8v-xq2h-657v 2026-09-04 03:32:06+00:00| seen| https://gist.github.com/alon710/be44b044fa32d940cf485868087a9fe9...
CVE-2026-72801
creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:05+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-8x84-r2ff-h8pq 2026-09-04 03:02:58+00:00| seen| https://gist.github.com/alon710/a6fd2dd8c86786415f62d46033a7b9e2...