CVE-2021-41773S

صور Docker القابلة للاختراق لثغرة CVE-2021-41773 لتجاوز المسار في Apache تنطبق هذه الثغرة فقط على الإصدار 2.4.49 الذي يحتوي على إعدادات غير افتراضية محددة. في حالات معينة، يمكن أن يؤدي ذلك إلى قراءة ملفات أو تنفيذ كود. https://twitter.com/ptswarm/status/1445376079548624899 إعداد قراءة الملفات...

CVE-2021-41773

Images Docker vulnérables pour CVE-2021-41773 - Traversée de chemin Apache Cette vulnérabilité ne s'applique qu' à la version 2.4.49 qui possède des configurations spécifiques non par défaut. Dans certaines situations, cela peut entraîner soit une lecture de fichier, soit une exécution de code...

CVE-2026-55420 Discourse: Remote code execution via pdf uploads

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, under certain non-default configurations, processing of PDF uploads could be exploited to obtain RCE on the server. This issue is patched in 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5...

PT-2026-56893

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.6.0 Discourse versions prior to 2026.5.1 Discourse versions prior to 2026.4.2 Discourse versions prior to 2026.1.5 Description Under certain non-default configurations, the processing of PDF uploads can be...

CVE-2026-1471

Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first user who authenticated after restart. The issue is limited to certain non-default configurations of SSO UserInfo endpoint. We...

Cross-Site Scripting (XSS)

web-console is vulnerable to cross-site scripting. The vulnerability, caused by missing X-Frame-Options and CSRF protections, in the oauth/token/request endpoint could allow a remote attacker to retrieve a token for CLI usage when using non default configs...