3200 matches found
EUVD-2026-53313
DjangoCRM's toggledefaultsorting view is the only route in common/urls.py that is not wrapped in loginrequired or staffmemberrequired, and it redirects to a caller-supplied nexturl GET parameter after only checking secureurlnexturl, which merely verifies the target host matches the current site's...
CVE-2026-71240
DjangoCRM exposes a vulnerability in the toggle_default_sorting view: it is the sole route in common/urls.py not wrapped by login_required or staff_member_required. The handler redirects to a caller-supplied next_url GET parameter after only validating secure_url(next_url) (which checks host agai...
Quiz and Survey Master <= 8.1.4 - SQL Injection
ExpressTech Quiz And Survey Master versions up to 8.1.4 contains an SQL injection caused by improper neutralization of special elements used in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires user interaction. id: CVE-2023-28787 info: name: Quiz and Survey Master =...
SickChill - Open Redirect
SickChill's login endpoint's 'next' parameter accepts arbitrary content, allowing authenticated attackers to perform open redirects, but this was fixed in commit c7128a8946c3701df95c285810eb75b2de18bf82 by redirecting to a default page. id: CVE-2024-53995 info: name: SickChill - Open Redirect...
AxxonSoft Axxon Next - Local File Inclusion
AxxonSoft Axxon Next suffers from a local file inclusion vulnerability. id: CVE-2018-7467 info: name: AxxonSoft Axxon Next - Local File Inclusion author: 0xAkoko severity: high description: AxxonSoft Axxon Next suffers from a local file inclusion vulnerability. impact: | An attacker can read...
CVE-2026-24078
Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling...
MAL-2026-11609 Malicious code in @onereach/or-browser-next (npm)
npm/@onereach/or-browser-next is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in @onereach/or-browser-next (npm)
npm/@onereach/or-browser-next is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11965 Malicious code in conv-context-next (npm)
npm/conv-context-next is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...
Malicious code in conv-context-next (npm)
npm/conv-context-next is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...
CVE-2026-24078
Technical details about CVE-2026-24078 are not publicly available in the provided documents. Monitor for updates from official bulletins.
EUVD-2026-52731
Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling...
ROOT-APP-NPM-CVE-2026-27979 CVE-2026-27979 in next - Patched by Root
Root has patched CVE-2026-27979 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-27980 CVE-2026-27980 in next - Patched by Root
Root has patched CVE-2026-27980 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44579 CVE-2026-44579 in next - Patched by Root
Root has patched CVE-2026-44579 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44580 CVE-2026-44580 in next - Patched by Root
Root has patched CVE-2026-44580 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-45109 CVE-2026-45109 in next - Patched by Root
Root has patched CVE-2026-45109 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44574 CVE-2026-44574 in next - Patched by Root
Root has patched CVE-2026-44574 in the next package for Root:npm. Multiple fixed versions available...