817684 matches found
GHSA-32R8-5843-4QW2 Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure
Summary Vikunja's web.Auth interface pkg/web/web.go, single method GetID int64 is satisfied by BOTH user.User and models.LinkSharing. A link-share's GetID returns the raw positive share.ID pkg/models/linksharing.go:83-85, which lives in the same positive autoincrement ID space as users.id. The sa...
CVE-2026-108261
Tina, a headless content management system, is vulnerable to an origin validation error in versions prior to tinacms 3.14.0 and @tinacms/app 2.5.14 . The vulnerability exists because the /~/* admin preview route can convert an attacker-controlled hash-router splat into an off-origin iframe URL vi...
EUVD-2026-95990
Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the // admin preview route in packages/tinacms/src/admin/index.tsx can turn an attacker-controlled hash-router splat into an off-origin iframe URL through packages/@tinacms/app/src/preview.tsx, while...
CVE-2026-108261 TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the // admin preview route in packages/tinacms/src/admin/index.tsx can turn an attacker-controlled hash-router splat into an off-origin iframe URL through packages/@tinacms/app/src/preview.tsx, while...
CVE-2026-108261 TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the // admin preview route in packages/tinacms/src/admin/index.tsx can turn an attacker-controlled hash-router splat into an off-origin iframe URL through packages/@tinacms/app/src/preview.tsx, while...
yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels
The Prometheus metrics middleware in pkg/server/server.go used r.Method directly as a label value on request counter and duration histogram metrics. Since the mux catch-all route matches any HTTP method, an unauthenticated attacker can send requests with arbitrary method strings e.g. curl -X "M1"...
GHSA-6R69-C6WG-7G8M yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels
The Prometheus metrics middleware in pkg/server/server.go used r.Method directly as a label value on request counter and duration histogram metrics. Since the mux catch-all route matches any HTTP method, an unauthenticated attacker can send requests with arbitrary method strings e.g. curl -X "M1"...
GHSA-3HJ7-6VMJ-H8V4 pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents
Impact pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document. Because ERPNext performs further document writes as a consequence of a governed ac...
pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents
Impact pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document. Because ERPNext performs further document writes as a consequence of a governed ac...
Needl
🚨 لم يعد Needl قيد الصيانة. إذا كنت بحاجة إلى دعم أو استشارة لمساعيك في الخصوصية، أرسل لي بريدًا إلكترونيًا على [email protected] 🚨 Needl استعد خصوصيتك. أضِع نفسك في كومة القش. من المحتمل أن مزود خدمة الإنترنت الخاص بك يتتبع عادات التصفح الخاصة بك ويبيعها لوكالات التسويق ولو بشكل مجهول. أو...
GHSA-VVCV-VPPH-H844 Vikunja: Link-share principal ID collision allows cross-account API token issuance and management
Executive Summary Vikunja accepts both regular-user JSON Web Tokens JWTs and link-share JWTs through its generic authenticated API route group. A link-share JWT resolves to a models.LinkSharing principal whose GetID method returns the numeric linkshares.id. The API-token management model then...
Vikunja: Link-share principal ID collision allows cross-account API token issuance and management
Executive Summary Vikunja accepts both regular-user JSON Web Tokens JWTs and link-share JWTs through its generic authenticated API route group. A link-share JWT resolves to a models.LinkSharing principal whose GetID method returns the numeric linkshares.id. The API-token management model then...
EUVD-2026-51991
Vikunja: Link-share principal ID collision allows cross-account API token issuance and management...
autodeauth
autodeauth أداة/خدمة مصممة لفصل الشبكات المحلية تلقائيًا تم اختبارها على Raspberry Pi OS و Kali Linux الإعداد $ chmod +x setup.sh $ sudo ./setup.sh يمكن تغيير هذا عن طريق تحرير /etc/systemd/system/autodeauth.service ? أدخل واجهة Wi-Fi التي تريد استخدامها مع خدمة autodeauth: wlan0 تم التثبيت! يمكن...
CVE-2026-108260 @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS
Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in packages/@tinacms/web-components/src/tina-markdown.js assigns a rich-text node.url value directly to an anchor href without validating the URL scheme. A content author can store a link using a script-capabl...
CVE-2026-108260
The @tinacms/web-components package in the TinaCMS headless content management system is vulnerable to stored XSS in versions prior to 0.2.1 . The root cause is located in packages/@tinacms/web-components/src/tina-markdown.js, where the tina-markdown element assigns a node.url value directly to a...
CVE-2026-108260 @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS
Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in packages/@tinacms/web-components/src/tina-markdown.js assigns a rich-text node.url value directly to an anchor href without validating the URL scheme. A content author can store a link using a script-capabl...
EUVD-2026-95989
Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in packages/@tinacms/web-components/src/tina-markdown.js assigns a rich-text node.url value directly to an anchor href without validating the URL scheme. A content author can store a link using a script-capabl...
GHSA-V3P6-34MC-HJ7V Vikunja: Scoped API token can mint unrestricted OAuth session credentials
Summary A scoped API token can bypass its declared permissions by using the OAuth authorization flow to mint normal session credentials. A token limited to: json "oauth":"authorize" can call /api/v1/oauth/authorize, receive an OAuth authorization code, exchange it at /api/v1/oauth/token, and obta...
Vikunja: Scoped API token can mint unrestricted OAuth session credentials
Summary A scoped API token can bypass its declared permissions by using the OAuth authorization flow to mint normal session credentials. A token limited to: json "oauth":"authorize" can call /api/v1/oauth/authorize, receive an OAuth authorization code, exchange it at /api/v1/oauth/token, and obta...