GHSA-FPVW-6M5V-HQFP Capsule Proxy Authentication bypass using an empty token

The privilege escalation is based on a missing check if the user is authenticated based on the TokenReview result. All the clusters running with the anonymous-auth Kubernetes API Server setting disable set to false are affected since it would be possible to bypass the token review mechanism,...

Woven dream SQL injection vulnerability re-use-vulnerability warning-the black bar safety net

Vulnerability type: SQL injection vulnerability Brief description: Need magicquotesgpc=Off,should be no big hazard vulnerability. The original the tick had a Dedecms injection vulnerability,seemingly did not repair,re-use,you can get the administrator password. Detailed description: With this...

Dedecms SQL injection lead to a review mechanism bypass vulnerability-vulnerability warning-the black bar safety net

! !...