295296 matches found
CVE-2026-113382
A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of the file backend/apiplugins.php of the component Plugin Installer. Such manipulation of the argument pluginfile leads to unrestricted upload. The attack may be...
CLSA-2026-1792494699 TuxCare security update for @babel/plugin-syntax-flow (1 CVE)
TuxCare rebuilt @babel/plugin-syntax-flow to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
CLSA-2026-1792494697 TuxCare security update for @babel/plugin-syntax-flow (2 CVEs)
TuxCare rebuilt @babel/plugin-syntax-flow to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
CLSA-2026-1792494698 TuxCare security update for @babel/plugin-syntax-flow (1 CVE)
TuxCare rebuilt @babel/plugin-syntax-flow to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1792494696 TuxCare security update for @babel/plugin-syntax-flow (1 CVE)
TuxCare rebuilt @babel/plugin-syntax-flow to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1792494695 TuxCare security update for @babel/plugin-syntax-flow (1 CVE)
TuxCare rebuilt @babel/plugin-syntax-flow to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
CLSA-2026-1792494693 TuxCare security update for @babel/plugin-syntax-flow (2 CVEs)
TuxCare rebuilt @babel/plugin-syntax-flow to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792494690 TuxCare security update for @babel/plugin-syntax-flow (1 CVE)
TuxCare rebuilt @babel/plugin-syntax-flow to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
CLSA-2026-1792494689 TuxCare security update for @babel/plugin-syntax-flow (1 CVE)
TuxCare rebuilt @babel/plugin-syntax-flow to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
CLSA-2026-1792494688 TuxCare security update for @babel/plugin-syntax-flow (1 CVE)
TuxCare rebuilt @babel/plugin-syntax-flow to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
CLSA-2026-1792494692 TuxCare security update for @babel/plugin-syntax-flow (1 CVE)
TuxCare rebuilt @babel/plugin-syntax-flow to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
CLSA-2026-1792494691 TuxCare security update for @babel/plugin-syntax-flow (1 CVE)
TuxCare rebuilt @babel/plugin-syntax-flow to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
CVE-2026-112071
The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any site visitor can set orders that are still awaiting payment to "canceled". This requires a page that contains the shop's order plugin. Orders that are...
CVE-2026-113382 arizu-id fast-tunnel Plugin Installer api_plugins.php extractTo unrestricted upload
A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of the file backend/apiplugins.php of the component Plugin Installer. Such manipulation of the argument pluginfile leads to unrestricted upload. The attack may be...
CVE-2026-113382
The arizu-id fast-tunnel software (version 1.0.0 ) contains a vulnerability in the Plugin Installer component. Specifically, the backend/api_plugins.php file utilizes the ZipArchive::extractTo function in a way that allows an attacker to manipulate the plugin_file argument. This flaw leads to an ...
EUVD-2026-104910
A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of the file backend/apiplugins.php of the component Plugin Installer. Such manipulation of the argument pluginfile leads to unrestricted upload. The attack may be...
CVE-2026-113382 arizu-id fast-tunnel Plugin Installer api_plugins.php extractTo unrestricted upload
A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of the file backend/apiplugins.php of the component Plugin Installer. Such manipulation of the argument pluginfile leads to unrestricted upload. The attack may be...
CVE-2026-113382
A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of the file backend/apiplugins.php of the component Plugin Installer. Such manipulation of the argument pluginfile leads to unrestricted upload. The attack may be...
CVE-2026-113382 arizu-id fast-tunnel Plugin Installer api_plugins.php extractTo unrestricted upload
A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of the file backend/apiplugins.php of the component Plugin Installer. Such manipulation of the argument pluginfile leads to unrestricted upload. The attack may be...