CVE-2026-34077

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components RSC APIs, there is a potential client-side Cross-Site Scripting XSS vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not...

WordPress plugin B2BKing Premium 输入验证错误漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

ROS-20251006-08

Vulnerability of GLPI system of requests, incidents and inventory of computer equipment is related to URL redirection to an untrusted site when the redirect parameter is processed. Exploitation of the vulnerability could Allow a remote attacker to impact the confidentiality and integrity of...

Cisco Webex Meetings 输入验证错误漏洞

Cisco Webex Meetings is a video conferencing solution from Cisco USA. An input validation error vulnerability exists in Cisco Webex Meetings that stems from insufficient validation of URLs, which could result in redirects to untrusted websites...

The vulnerability of the OAuth component of the Java framework for securing Spring-based industrial applications allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the OAuth component in the Java framework for securing Spring-based industrial applications relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...