24669 matches found
GHSA-JQHH-CJMQ-VMV6 Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
Summary Chat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...
CVE-2026-87931 Behavioral Technology Group Pavlok Behavioral Conditioning Wearable Apple Notification Center Service Event buffer overflow
A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the component Apple Notification Center Service Event Handler. The manipulation leads to buffer overflow. The attack must be carried out from...
CVE-2026-88002
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1, the message-chain reconstruction helper in backend/openwebui/utils/misc.py advanced through a chat history by map key but tracked visited entries using each message body's optional id...
CVE-2024-42009
CVE-2024-42009 – Roundcube存储型XSS（Docker PoC） 📌 概述 该仓库演示了针对 CVE-2024-42009 的有效概念验证（PoC），这是 Roundcube Webmail 中的一个存储型跨站脚本（XSS）漏洞。 该漏洞由不正确的 HTML 净化以及随后不安全地重新处理属性导致，攻击者可通过构造的 HTML 邮件注入恶意事件处理程序。 ⚠️ 受影响版本 Roundcube ≤ 1.5.7 Roundcube ≤ 1.6.7 🧠 漏洞摘要 Roundcube 会净化收到的 HTML 邮件，但随后会重新处理某些属性（例如...
CVE-2026-88002
Open WebUI (self-hosted AI platform), versions 0.5.0 through 0.11.1 , is affected by a denial-of-service vulnerability in the message-chain reconstruction helper in backend/open_webui/utils/misc.py. The helper advanced through chat history by map key but tracked visited entries using each message...
CVE-2026-88002 Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1, the message-chain reconstruction helper in backend/openwebui/utils/misc.py advanced through a chat history by map key but tracked visited entries using each message body's optional id...
CVE-2026-87011
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, the unauthenticated POST /oauth/backchannel-logout handler in backend/openwebui/utils/oauth.py fetched the OIDC discovery document and signing keys before validating a submitted logout...
CVE-2026-87011 Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, the unauthenticated POST /oauth/backchannel-logout handler in backend/openwebui/utils/oauth.py fetched the OIDC discovery document and signing keys before validating a submitted logout...
CVE-2026-87011
Open WebUI , a self-hosted AI platform, contains a denial-of-service vulnerability in the unauthenticated POST /oauth/backchannel-logout handler (backend/open_webui/utils/oauth.py). From version 0.9.0 through 0.11.1 , the handler fetched the OIDC discovery document and signing keys before validat...
CVE-2026-87011 Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, the unauthenticated POST /oauth/backchannel-logout handler in backend/openwebui/utils/oauth.py fetched the OIDC discovery document and signing keys before validating a submitted logout...
CVE-2025-65354
CVE-2025-65354 — SQL 注入漏洞 摘要 PuneethReddyHC event-management 应用 1.0 版本中存在一个 SQL 注入漏洞，原因是输入处理不当。 漏洞类型 SQL 注入 受影响组件 端点：/Grocery/searchproductsitname.php 参数：sitemname POST 攻击类型 远程 影响 远程、未经身份验证的攻击者可通过向 sitemname POST 参数注入精心构造的载荷来操纵 SQL 查询。成功利用可能允许篡改查询逻辑并泄露数据库内容，进而可能导致敏感数据泄露和后端被攻破。 受影响版本...
WinBypass
Windows UAC 绕过 | 权限提升 Slui 文件处理器劫持 LPE - Windows 8-10 SluiHijackBypass.ps1 通过 FodHelper 绕过 UAC - Windows 10 FodhelperBypass.ps1 通过事件查看器绕过 UAC - Windows 7 EventVwrBypass.ps1 Metasploit-Framework 模块 bypassuacsluihijack.rb 复制到/.msf4/modules/exploits/windows/local/ 已合并到官方仓库 Shell 升级 要将 x86 meterprete...
CVE-2025-56243
CVE-2025-56243 - PuneethReddyHC / 活动管理系统 v1.0 中的反射型 XSS 漏洞 标题： register.php 中 eventid 参数导致的反射型跨站脚本（XSS）漏洞 厂商 / 仓库： PuneethReddyHC / event-management 受影响版本： 1.0（测试时为 master 分支/标签） 报告人： Hafiz Pradana Gemilang 披露状态： 已私下通知厂商 — 为保障用户安全，暂不公开漏洞利用 PoC。 状态和时间线将在协调或补丁发布后更新。 概述 在 register.php...
CVE-2022-44830
建议描述 Sourcecodester Event Registration App v1.0 被发现通过 First Name、Contact 和 Remarks 字段存在多个 CSV 注入漏洞。这些漏洞允许攻击者通过精心制作的 Excel 文件执行任意代码。 附加信息 Proof of Concept: https://drive.google.com/file/d/17rSb8GLFPQfqnVFI56AYffbVMDg8z75t/view?usp=sharing Vendor Homepage:...
CVE-2024-11396
CVE-2024-11396 Event monster = 1.4.3 - 通过访客列表导出造成信息泄露 描述 Event Monster – 事件管理、门票预订、即将举办活动的WordPress插件在所有版本（包括1.4.3）中，通过访客列表导出文件存在信息泄露漏洞。在导出过程中，CSV文件会以硬编码的文件名创建在wp-content文件夹中，且该文件可公开访问。这使得未认证的攻击者能够提取事件访客的数据，包括名字、姓氏、电子邮件和电话号码。 详情 类型 : plugin Slug : event-monster 受影响版本 : 1.4.3 CVSS分数 : 5.3 CVSS等级 :...
CVE-2025-13401-XSS-Stored
概念验证：Autoptimize 标签。 在版本 3.1.13 中，该函数采用“黑名单”方法（通过 pregreplace）在将原始 标签转换为 标签之前，移除特定属性如 title、alt、class、id、width 和 height。然而，它未能移除事件处理属性如 onload 或 onerror。 经过身份验证的攻击者（至少拥有贡献者角色）可以在帖子中嵌入恶意的 标签。当插件处理该帖子以生成预加载链接时，恶意的事件处理程序被保留并注入到页面 中的 标签内。由于 支持 onload 事件，当资源加载时，JavaScript 会执行。 漏洞代码（v3.1.13）...
[SECURITY] Fedora 44 Update: libevent-2.1.13-1.fc44
The libevent API provides a mechanism to execute a callback function when a specific event occurs on a file descriptor or after a timeout has been reached. libevent is meant to replace the asynchronous event loop found in event driven network servers. An application just needs to call eventdispat...
CVE-2026-49310
Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...