113 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-30924
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qui is a web interface for managing qBittorrent instances. Versions 1.14.1 and below use a permissive CORS policy that reflects arbitrary origins while also...
GO-2026-4774 qui CORS Misconfiguration: Arbitrary Origins Trusted in github.com/autobrr/qui
qui CORS Misconfiguration: Arbitrary Origins Trusted in github.com/autobrr/qui...
CVE-2026-30924
qui is a web interface for managing qBittorrent instances. Versions 1.14.1 and below use a permissive CORS policy that reflects arbitrary origins while also returning Access-Control-Allow-Credentials: true, effectively allowing any external webpage to make authenticated requests on behalf of a...
CVE-2026-30924 qui CORS Misconfiguration: Arbitrary Origins Trusted
qui is a web interface for managing qBittorrent instances. Versions 1.14.1 and below use a permissive CORS policy that reflects arbitrary origins while also returning Access-Control-Allow-Credentials: true, effectively allowing any external webpage to make authenticated requests on behalf of a...
CVE-2026-30924 qui CORS Misconfiguration: Arbitrary Origins Trusted
qui is a web interface for managing qBittorrent instances. Versions 1.14.1 and below use a permissive CORS policy that reflects arbitrary origins while also returning Access-Control-Allow-Credentials: true, effectively allowing any external webpage to make authenticated requests on behalf of a...
CVE-2026-30924
CVE-2026-30924 affects the web interface for managing qBittorrent instances (qui). Versions 1.14.1 and earlier are reported to have a permissive CORS policy that reflects arbitrary origins and returns Access-Control-Allow-Credentials: true, enabling a logged-in user’s session to be leveraged by a...
CVE-2026-30924: Permissive Cross-domain Policy with Untrusted Domains
qui is a web interface for managing qBittorrent instances. Versions 1.14.1 and below use a permissive CORS policy that reflects arbitrary origins while also returning Access-Control-Allow-Credentials: true, effectively allowing any external webpage to make authenticated requests on behalf of a...
qui security vulnerabilities
qui is a lightweight multi-instance web management interface developed by autobrr. Versions of qui prior to 1.14.1 have security vulnerabilities, which stem from overly permissive CORS policies. These vulnerabilities could lead to cross-domain request forgery and information leakage...
Malicious code in @kollorg/qui-itaque (npm)
The package @kollorg/qui-itaque was found to contain malicious code...
Malicious code in @devtea2027/qui-error-soluta-iusto (npm)
The package @devtea2027/qui-error-soluta-iusto was found to contain malicious code...
Malicious code in @teamteanpm2024/itaque-expedita-qui (npm)
The package @teamteanpm2024/itaque-expedita-qui was found to contain malicious code...
MAL-2025-42405 Malicious code in @devtea2027/qui-error-soluta-iusto (npm)
The package @devtea2027/qui-error-soluta-iusto was found to contain malicious code...
MAL-2025-42823 Malicious code in @teamteanpm2024/itaque-expedita-qui (npm)
The package @teamteanpm2024/itaque-expedita-qui was found to contain malicious code...
Malicious code in @kollorg/exercitationem-assumenda-qui (npm)
The package @kollorg/exercitationem-assumenda-qui was found to contain malicious code...
Malicious code in @devtea2026/qui-quos-laborum-amet (npm)
The package @devtea2026/qui-quos-laborum-amet was found to contain malicious code...
Malicious code in @ellentorg/voluptatibus-voluptates-qui (npm)
The package @ellentorg/voluptatibus-voluptates-qui was found to contain malicious code...
MAL-2025-42348 Malicious code in @crabas0npm/qui-eaque-maxime-eligendi (npm)
The package @crabas0npm/qui-eaque-maxime-eligendi was found to contain malicious code...
MAL-2025-42556 Malicious code in @hishpr/non-unde-qui (npm)
The package @hishpr/non-unde-qui was found to contain malicious code...