CVE-2026-39940: URL Redirection to Untrusted Site

ChurchCRM is an open-source church management system. Prior to 7.0.0, it was possible in many places across the ChurchCRM application to create a link that, when visited by an authenticated user, would redirect them to any URL chosen by an attacker if they clicked 'Cancel' button on the page. For...

CVE-2024-27894

The Pulsar Functions Worker includes a capability that permits authenticated users to create functions where the function's implementation is referenced by a URL. The supported URL schemes include "file", "http", and "https". When a function is created using this method, the Functions Worker will...

curl 信息泄露漏洞

curl is a tool used to transfer data from or to a server. An information disclosure vulnerability exists in curl that stems from a security flaw that allows credentials to be disclosed to other servers when it follows a redirection from an authentication-protected HTTPS URL to another protocol an...