CVE-2026-73284 RustFS: AddServiceAccount Handler Allows Creation of Root-Parent Service Accounts

RustFS is a distributed object storage system built in Rust. RustFS AddServiceAccount in rustfs/src/admin/handlers/serviceaccount.rs accepts an attacker-controlled targetuser after only checking CreateServiceAccountAdminAction, passes it to newserviceaccount, and prepareserviceaccountauth sets...

CVE-2026-67327

better-auth versions = 1.1.3 and = 1.7.0-beta.0 and 1.7.0-beta.10 are vulnerable to account takeover via pre-account hijacking on magic-link and email-OTP sign-in when open email/password registration is enabled. An attacker registers an account with the victim's email address and an...

CVE-2026-67327

Better-Auth before 1.6.22 is vulnerable to account takeover via pre-account hijacking on magic-link and email-OTP sign-in when open email/password registration is enabled. An attacker registers a victims email with a chosen password; the account remains unverified. When the victim signs in later...

@better-auth/cli (>=1.0.0-canary.2, <=1.2.9), @erquhart/convex-better-auth (0.4.1) +11 more potentially affected by CVE-2025-53535 via better-auth (>=1.0.0, <=1.2.9-beta.10)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =0.0.0, =0.1.174, =1.0.2, =1.0.5, =1.0.0, =0.0.5, =1.1.368, =3.7.1, =0.1.2-beta.2, =1.0.0, =1.1.0 Source cves: CVE-2025-53535 Source advisory: OSV:GHSA-36RG-GFQ2-3H56...

CVE-2021-43674

ThinkUp 2.0-beta.10 is affected by a path manipulation vulnerability in Smarty.class.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2021-43674

CVE-2021-43674 concerns ThinkUp 2.0-beta.10 and a vulnerability in Smarty.class.php that enables path traversal. The connected sources consistently identify this as a vulnerability affecting ThinkUp 2.0-beta.10 and note that it affects products no longer supported by the maintainer. No explicit e...

Intel® oneAPI Toolkit Advisory

Summary: A potential security vulnerability in Intel® oneAPI Toolkits may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-29242 Description: Improper access control for IntelR oneAPI Toolkits befor...

CVE-2017-6397

FlightAirMap v1.0-beta.10 is affected by multiple cross-site scripting (XSS) vulnerabilities due to insufficient filtration of user-supplied data in several *-sub-menu.php pages. The issue allows an attacker to inject arbitrary HTML/JavaScript in the context of the vulnerable website. Connected s...

SmartMail Server 1.0 BETA 10 Oversized Request Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6075/info SmartMail Server is reported to be prone to a remote denial of service condition. It is possible to trigger this condition by sending large amounts 5MB+ of data to the server via TCP port 25 or 110. SmartMail...