59123 matches found
vito 安全漏洞
VitoDeploy is an open-source web application for server management and PHP application deployment. Versions of Vito before 3.20.3 contained security vulnerabilities. These vulnerabilities stemmed from the lack of authorization checks during the workflow site creation process. This could allow a...
Parse Server 安全漏洞
Parse Server is an open-source backend developed by the Parse Platform. It can be deployed on any infrastructure that runs Node.js. There were security vulnerabilities in versions of Parse Server prior to 8.6.5 and 9.5.0-alpha.3. These vulnerabilities stemmed from the use of readOnlyMasterKey,...
Internet Routing Registry Daemon 授权问题漏洞
The Internet Routing Registry Daemon IRRd is a routing registry daemon. Versions of IRRd from 4.4.0 to 4.4.5 and from 4.5.0 to 4.5.1 had an authorization issue. This issue stemmed from the ability for attackers to manipulate the HTTP Host header in password reset or account creation requests,...
PT-2026-23680
Precurio Intranet Portal 2.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by submitting crafted POST requests. Attackers can forge requests to the /public/admin/user/submitnew endpoint with user creation parameter...
openSUSE 16 Security Update : gitea-tea (openSUSE-SU-2026:20318-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20318-1 advisory. Changes in gitea-tea: - update to 0.12.0: New Features - Add tea actions commands for managing workflow runs and workflows in 880, 796 - Add tea...
CVE-2026-29077
creationtimestamp| type| source ---|---|--- 2026-03-05 22:48:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgduyhhcoa2u...
CVE-2026-28436
creationtimestamp| type| source ---|---|--- 2026-03-05 22:28:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdtunnjmb2n...
CVE-2026-21622
creationtimestamp| type| source ---|---|--- 2026-03-05 22:23:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdtlp7eur2y...
CVE-2025-70614
creationtimestamp| type| source ---|---|--- 2026-03-05 21:50:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdrqojbea2x 2026-03-07 15:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgi3rzzm452v 2026-03-26 11:00:00+00:00| seen|...
CVE-2026-28410
creationtimestamp| type| source ---|---|--- 2026-03-05 21:49:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdrnyedoi2x...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the milestone selection. An attacker can execute arbitrary JavaScript code in the context of another user's browser by storing a crafted HTML or JavaScript payload in a repository's milestone name, which is...
CVE-2026-30832
creationtimestamp| type| source ---|---|--- 2026-03-05 21:10:15+00:00| published-proof-of-concept| https://github.com/charmbracelet/soft-serve/security/advisories/GHSA-3fvx-xrxq-8jvv 2026-03-07 15:15:55+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30832...
Gokapi has CSRF in Login Endpoint
Summary The login flow accepts credential-bearing requests without CSRF protection mechanisms tied to the browser session context. The handler parses form values directly and creates a session on successful credential validation. Issue found by aisafe.io Impact An attacker can force a victim...
CVE-2026-28118
creationtimestamp| type| source ---|---|--- 2026-03-05 19:33:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdk3oxtlt2h...
CVE-2026-24457
creationtimestamp| type| source ---|---|--- 2026-03-05 19:33:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdk3bgqqg2c...
CVE-2025-66678
creationtimestamp| type| source ---|---|--- 2026-03-05 19:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdibmy3uv2n 2026-06-08 09:48:18+00:00| seen| https://gist.github.com/harvey7092/9fdcae180558f96fe75b1dbb492d9227...
CVE-2026-30798
creationtimestamp| type| source ---|---|--- 2026-03-05 18:48:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdhl4ebkn27 2026-03-07 02:38:05+00:00| seen| https://bsky.app/profile/secqube.com/post/3mggsblxioo2y...
CVE-2026-30793
creationtimestamp| type| source ---|---|--- 2026-03-05 18:33:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdgqaypbp2e...