13033 matches found
CVE-2026-39985 LORIS has an open redirect field on login
LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. Prior to 27.0.3 and 28.0.1, the redirect parameter upon login to LORIS was not validating the value of the redirect as being within LORIS,...
CVE-2026-34578
creationtimestamp| type| source ---|---|--- 2026-04-09 16:59:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3brukrch2n 2026-04-12 12:00:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjcchlxy3v24 2026-04-14 23:37:07+00:00| seen|...
CVE-2026-40163
creationtimestamp| type| source ---|---|--- 2026-04-09 11:09:20+00:00| published-proof-of-concept| https://github.com/saltcorn/saltcorn/security/advisories/GHSA-32pv-mpqg-h292 2026-04-10 19:22:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj62bo53iz2g 2026-04-10 19:31:23+00:00|...
CVE-2024-1490
creationtimestamp| type| source ---|---|--- 2026-04-09 10:58:21+00:00| seen| https://infosec.exchange/users/certvde/statuses/116374392044690456 2026-04-09 10:58:28+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mj2nmmql3a22 2026-04-09 12:02:42+00:00| seen|...
CVE-2026-40158
creationtimestamp| type| source ---|---|--- 2026-04-09 10:01:55+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-3c4r-6p77-xwr7 2026-04-10 08:17:13+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-40158...
CVE-2026-5742
The UsersWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.2.60. This is due to insufficient input sanitization of user-supplied URL fields and improper output escaping when rendering user profile data in badge widgets. This makes it possible f...
Juniper Networks Junos OS 安全漏洞
Juniper Networks Junos OS is a network operating system specifically designed for hardware devices used by Juniper Networks. This operating system provides secure programming interfaces and the Junos SDK. Vulnerabilities exist in versions of Junos OS prior to 23.2R2-S7, 23.4R2-S6 versions 23.4,...
HashiCorp go-getter 安全漏洞
HashiCorp go-getter is a Go golang library from the American company HashiCorp, used to download files or directories using URLs as the main input format from various sources. HashiCorp go-getter versions prior to v1.8.5 contained a security vulnerability that allowed arbitrary files to be read...
CVE-2026-39862 Tophat has a Command Injection Vulnerability When Accessing a Maliciously Crafted Tophat Link
Tophat is a mobile applications testing harness. Prior to 2.5.1, Tophat is affected by remote code execution via crafted tophat:// or http://localhost:29070 URLs. The arguments query parameter flows unsanitized from URL parsing through to /bin/bash -c execution, allowing an attacker to execute...
CVE-2026-39862
Tophat, a mobile alkalmazations testing harness, is affected prior to version 2.5.1. A crafted tophat:// or localhost:29070 URL causes the arguments query parameter to flow unsanitized from URL parsing to /bin/bash -c, enabling remote code execution with the developer’s macOS user permissions. An...
CVE-2026-39862 Tophat has a Command Injection Vulnerability When Accessing a Maliciously Crafted Tophat Link
Tophat is a mobile applications testing harness. Prior to 2.5.1, Tophat is affected by remote code execution via crafted tophat:// or http://localhost:29070 URLs. The arguments query parameter flows unsanitized from URL parsing through to /bin/bash -c execution, allowing an attacker to execute...
CVE-2026-39862 Tophat has a Command Injection Vulnerability When Accessing a Maliciously Crafted Tophat Link
Tophat is a mobile applications testing harness. Prior to 2.5.1, Tophat is affected by remote code execution via crafted tophat:// or http://localhost:29070 URLs. The arguments query parameter flows unsanitized from URL parsing through to /bin/bash -c execution, allowing an attacker to execute...
CVE-2026-34722
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the used endpoint for ticket creation was missing authorization if the related parameter for adding links is used. This vulnerability is fixed in 7.0.1 and 6.5.4...
monetr: Protected Transactions Deletable via PUT
Summary A transaction integrity flaw allows an authenticated tenant user to soft-delete synced non-manual transactions through the transaction update endpoint, despite the application explicitly blocking deletion of those transactions via the normal DELETE path. This bypass undermines the intende...
EUVD-2026-20562
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the used endpoint for ticket creation was missing authorization if the related parameter for adding links is used. This vulnerability is fixed in 7.0.1 and 6.5.4...
CVE-2026-4003
creationtimestamp| type| source ---|---|--- 2026-04-08 05:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116367440736752589 2026-04-08 05:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mixktii6cm2b 2026-04-08 06:00:15+00:00| seen|...
File Browser share links remain accessible after Share/Download permissions are revoked
When an admin revokes a user's Share and Download permissions, existing share links created by that user remain fully accessible to unauthenticated users. The public share download handler does not re-check the share owner's current permissions. Verified with a running PoC against v2.62.2 commit...
Incorrect Authorization
Overview github.com/filebrowser/filebrowser/v2/http is a web file browser. Affected versions of this package are vulnerable to Incorrect Authorization due to the withHashFile handler not re-checking the share owner's current permissions. An attacker can access previously created share links and...
GHSA-V9W4-GM2X-6RVF File Browser share links remain accessible after Share/Download permissions are revoked
When an admin revokes a user's Share and Download permissions, existing share links created by that user remain fully accessible to unauthenticated users. The public share download handler does not re-check the share owner's current permissions. Verified with a running PoC against v2.62.2 commit...