35393 matches found
CVE-2026-49264 vulnerabilities
Vulnerabilities for packages: dask-kubernetes, kserve-sklearnserver, azureml-inference-server-http, kubeflow-katib, ansible-operator-fips, kserve-pmmlserver-fips, litellm, metaflow-service-fips, kserve-lgbserver, dask-kubernetes-fips, kubeflow-jupyter-web-app, awx, ggshield, k8s-sidecar,...
CVE-2026-49264 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, az, kubeflow-katib, open-webui, dask-kubernetes, kubeflow-pipelines, kubeflow-volumes-web-app, kserve, kubeflow-jupyter-web-app, jupyter-base-notebook, k8s-sidecar, datadog-agent, ggshield...
GHSA-HJ66-6F7G-4R5V vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, az, kubeflow-katib, open-webui, dask-kubernetes, kubeflow-pipelines, kubeflow-volumes-web-app, kserve, kubeflow-jupyter-web-app, jupyter-base-notebook, k8s-sidecar, datadog-agent, ggshield...
CVE-2026-55224
MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the app-store plugin service concatenates...
CVE-2026-55224
The MineAdmin backend management system is vulnerable to a path traversal flaw in its app-store plugin service prior to version 3.2.0-alpha.2 . The application fails to sanitize the user-supplied identifier parameter, concatenating it directly into filesystem paths within plugin/mine-admin/app-st...
CVE-2026-55224 MineAdmin: Path Traversal via Unsanitized identifier in Plugin Install/Uninstall
MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the app-store plugin service concatenates...
CVE-2026-55224 MineAdmin: Path Traversal via Unsanitized identifier in Plugin Install/Uninstall
MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the app-store plugin service concatenates...
CVE-2026-55224 MineAdmin: Path Traversal via Unsanitized identifier in Plugin Install/Uninstall
MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the app-store plugin service concatenates...
CVE-2023-25813-TEST
CVE Test App Sequelize CVE-2023-25813 동작을 로컬에서 확인하기 위한 Express + MySQL 실습 앱입니다. 이 프로젝트는 의도적으로 취약한 Sequelize 버전과 취약한 로그인 쿼리 패턴을 유지합니다. 인터넷에 노출하지 말고 로컬 Docker 실습 환경에서만 실행하세요. 구성 Web: Express, EJS DB: MySQL 8.0 ORM: Sequelize 6.19.0 Docker DB 포트: localhost:3307 Web 포트: localhost:3000 주요 기능: 회원가입...
CVE-2026-55176 Soft Machine: Cross-tenant workspace API auth bypass via shared `CONTAINER_SHARED_SECRET` bearer token
Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, two authentication helpers in /app/server.js — verifyContainerAuth and authenticateWorkspaceHttp — accept the global CONTAINERSHAREDSECRET as a bearer token without verifying which...
NextJS-app-CVE-2025-55182
Next.js CVE-2025-55182 개념 증명 이것은 CVE-2025-55182일명 "React2Shell"라는 React Server Components의 심각한 원격 코드 실행RCE 취약점에 취약한 개념 증명 Next.js 애플리케이션입니다. ⚠️ 경고 이 애플리케이션은 의도적으로 취약하게 만들어졌으며 다음 용도로만 사용해야 합니다: 보안 연구 교육 목적 격리된 환경에서의 테스트 다음은 절대 하지 마십시오: 프로덕션에 배포 신뢰할 수 없는 네트워크에 노출 민감한 데이터와 함께 사용 취약점 세부 정보...
ish
iSH A project to get a Linux shell running on iOS, using usermode x86 emulation and syscall translation. For the current status of the project, check the issues tab, and the commit logs. App Store page TestFlight beta Discord server Wiki with help and tutorials README中文 如若未能保持最新，请提交PR以更新 Hacking...
CVE-2024-46982-NUCLEI
이 프로젝트는 create-next-app으로 부트스트랩된 Next.js 프로젝트입니다. 시작하기 먼저 개발 서버를 실행합니다: npm run dev or yarn dev or pnpm dev or bun run dev 브라우저에서 http://localhost:3000을 열어 결과를 확인하세요. pages/index.js 파일을 수정하여 페이지 편집을 시작할 수 있습니다. 파일을 편집하면 페이지가 자동으로 업데이트됩니다. API 라우트는 http://localhost:3000/api/hello에서 접근할 수 있습니다. 이...
CVE-2026-92712
The ReactPress – Create React App for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'permalink' parameter in all versions up to, and including, 3.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...
CVE-2026-75098
The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...
CVE-2026-75098 Product Designer App <= 1.1.3 - Unauthenticated Arbitrary File Read via 'svg' Parameter in pdapp-render-design
The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...
CVE-2026-92712 ReactPress <= 3.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'permalink' Parameter
The ReactPress – Create React App for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'permalink' parameter in all versions up to, and including, 3.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...
EUVD-2026-89684
The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...
CVE-2026-75098 Product Designer App <= 1.1.3 - Unauthenticated Arbitrary File Read via 'svg' Parameter in pdapp-render-design
The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...
CVE-2026-75098
The Product Designer App plugin for WordPress (versions up to and including 1.1.3 ) is vulnerable to an unauthenticated arbitrary file read via a Directory Traversal flaw in the svg parameter. An attacker can exploit this by obtaining a nonce and token, which are publicly emitted as JavaScript gl...