CVE-2021-41773S

CVE-2021-41773 Apache 路径遍历漏洞的易受攻击 Docker 镜像 该漏洞 仅 适用于具有特定非默认配置的 2.4.49 版本。在某些情况下，这可能导致文件读取或代码执行。 https://twitter.com/ptswarm/status/1445376079548624899 可造成文件读取的漏洞配置 可直接从 Docker Hub 拉取容器 docker pull blueteamsteve/cve-2021-41773:no-cgid 并使用以下命令执行 docker run -dit -p 8080:80...

CVE-2021-41773

针对 CVE-2021-41773 Apache 路径遍历漏洞的易受攻击的 Docker 镜像 该漏洞 仅 适用于具有特定非默认配置的 2.4.49 版本。在某些情况下，这可能导致文件读取或代码执行。 https://twitter.com/ptswarm/status/1445376079548624899 易受攻击的文件读取配置 容器可以直接从 Docker Hub 拉取，使用 docker pull blueteamsteve/cve-2021-41773:no-cgid 并执行 docker run -dit -p 8080:80...

CVE-2026-55420 Discourse: Remote code execution via pdf uploads

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, under certain non-default configurations, processing of PDF uploads could be exploited to obtain RCE on the server. This issue is patched in 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5...

PT-2026-56893

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.6.0 Discourse versions prior to 2026.5.1 Discourse versions prior to 2026.4.2 Discourse versions prior to 2026.1.5 Description Under certain non-default configurations, the processing of PDF uploads can be...

CVE-2026-1471

Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first user who authenticated after restart. The issue is limited to certain non-default configurations of SSO UserInfo endpoint. We...

Cross-Site Scripting (XSS)

web-console is vulnerable to cross-site scripting. The vulnerability, caused by missing X-Frame-Options and CSRF protections, in the oauth/token/request endpoint could allow a remote attacker to retrieve a token for CLI usage when using non default configs...