200 matches found
PT-2026-24146
Name of the Vulnerable Software and Affected Versions Flarum affected versions not specified Description The Flarum forum software, when used with the flarum/nicknames extension, allows a registered user to set a nickname that email clients may interpret as a hyperlink. This nickname is directly...
CVE-2018-19133
In Flarum Core 0.1.0-beta.7.1, a serious leak can get everyone's email address...
CVE-2022-35921
fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discussion disablement by users. Users of Byobu should update the extension to version 1.1.7, where this has been patched. Users of Byobu with Flarum 1.0 or 1.1 should upgrade to...
CVE-2023-40033
Flarum is an open source forum software. Flarum is affected by a vulnerability that allows an attacker to conduct a Blind Server-Side Request Forgery SSRF attack or disclose any file on the server, even with a basic user account on any Flarum forum. By uploading a file containing a URL and spoofi...
PHP Remote File Inclusion
Overview fof/pretty-mail is a Create HTML email for Flarum Affected versions of this package are vulnerable to PHP Remote File Inclusion via the email template processing. An attacker can access arbitrary files on the server by injecting file inclusion payloads into the template configuration...
Pretty Mail by FriendsOfFlarum 安全漏洞
Pretty Mail by FriendsOfFlarum is an open source tool from Friends of Flarum that allows you to make custom html templates for emails. A security vulnerability exists in Pretty Mail by FriendsOfFlarum version 1.1.2, which stems from a server-side template injection in an email template that could...
EUVD-2019-4706
Malware in sbrugna...
EUVD-2021-1271
Malware in sbrugna...
EUVD-2021-0503
Malware in sbrugna...
EUVD-2023-2223
Malicious code in bioql PyPI...
EUVD-2023-0303
Malicious code in bioql PyPI...
EUVD-2022-7273
Malicious code in bioql PyPI...
EUVD-2022-6494
Malicious code in bioql PyPI...
EUVD-2023-1112
Malicious code in bioql PyPI...
EUVD-2023-0408
Malicious code in bioql PyPI...
EUVD-2022-3907
Malicious code in bioql PyPI...
EUVD-2025-7808
Malicious code in bioql PyPI...
EUVD-2023-0489
Malicious code in bioql PyPI...
EUVD-2022-4697
Malicious code in bioql PyPI...
CVE-2024-21641
Flarum is open source discussion platform software. Prior to version 1.8.5, the Flarum /logout route includes a redirect parameter that allows any third party to redirect users from a trusted domain of the Flarum installation to redirect to any link. For logged-in users, the logout must be...