Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

Linear eMerge E3 - Cross-Site Scripting

Linear eMerge E3-Series devices are vulnerable to cross-site scripting via the 'layout' parameter. id: CVE-2019-7255 info: name: Linear eMerge E3 - Cross-Site Scripting author: arafatansari severity: medium description: | Linear eMerge E3-Series devices are vulnerable to cross-site scripting via...

Dahua Smart Park Management - Arbitrary File Upload

Dahua wisdom park integrated management platform is a comprehensive management platform, a park operations,resource allocation, and intelligence services,and other functions, including/emap/devicePointaddImgIco?. id: CVE-2023-3836 info: name: Dahua Smart Park Management - Arbitrary File Upload...

IceWarp Mail Server <11.1.1 - Directory Traversal

IceWarp Mail Server versions prior to 11.1.1 suffer from a directory traversal vulnerability. id: CVE-2015-1503 info: name: IceWarp Mail Server 11.1.1 - Directory Traversal author: 0xAkoko severity: high description: IceWarp Mail Server versions prior to 11.1.1 suffer from a directory traversal...

SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality. id: CVE-2025-40536 info: name: SolarWinds Web Help Desk 12.8.8 Hotfix 1 HF1 - Security...

Mongo-Express - Remote Code Execution

Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...

DEBIAN-CVE-2026-16658

Bulletin has no description...

ROOT-APP-NPM-CVE-2026-48779 CVE-2026-48779 in ws - Patched by Root

Root has patched CVE-2026-48779 in the ws package for Root:npm. Multiple fixed versions available...

CLSA-2026-1788333194 TuxCare security update for guzzlehttp/psr7 (1 CVE)

TuxCare rebuilt guzzlehttp/psr7 to address 1 CVE. Fixed in 1.1.0-p2+tuxcare...

Important: Red Hat Security Advisory: golang security update

An update for golang is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

ROOT-APP-NPM-CVE-2026-67214 CVE-2026-67214 in nanoid - Patched by Root

Root has patched CVE-2026-67214 in the nanoid package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-67213 CVE-2026-67213 in nanoid - Patched by Root

Root has patched CVE-2026-67213 in the nanoid package for Root:npm. Multiple fixed versions available...

CVE-2019-18634

CVE-2019-18634...

Mr.SIP

SIP Security, Attack and Audit Framework Mr.SIP is...

ROOT-APP-PYPI-CVE-2026-69249 CVE-2026-69249 in cryptography - Patched by Root

Root has patched CVE-2026-69249 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-26007 CVE-2026-26007 in cryptography - Patched by Root

Root has patched CVE-2026-26007 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-OS-ALPINE-322-CVE-2026-66035 CVE-2026-66035 in libssh2 - Patched by Root

Root has patched CVE-2026-66035 in the libssh2 package for Root:Alpine:3.22. Multiple fixed versions available...

cve-scanner

OpenClaw用CVEスキャナー バージョン: 1.0.0 作者: Simon（自律首席補佐官） ライセンス: MIT 公開日: 2026年3月22日 カテゴリ: セキュリティ、ツール TL;DR OpenClaw用の依存関係ゼロのCVEスキャナー。お使いのバージョンを522以上の既知の脆弱性と照合し、アップデートを推奨し、最近のHIGH重要度CVEを表示します。100%ローカル動作、外部呼び出しゼロ、セキュリティファースト設計。 存在理由: OpenClawセキュリティ危機（2026年3月）—...

GHSA-C3F5-4G7F-QJQJ

creationtimestamp| type| source ---|---|--- 2026-09-02 06:00:06+00:00| seen| https://t.me/HackingTeamGrupoOfficial/47087 2026-09-03 00:00:51+00:00| published-proof-of-concept| https://t.me/HackingTeamGrupoOfficial/47087...

middleforce

MiddleForce 🔍 概要 MiddleForce は、Next.js ミドルウェアの CVE-2025-29927 脆弱性を検出・悪用するために設計された専門的なセキュリティテストツールです。このツールは、セキュリティ専門家がミドルウェアバイパス攻撃に対して脆弱なアプリケーションを特定するのに役立ちます。 🚀 特徴 ミドルウェアバイパス検出 : Next.js ミドルウェアバイパス脆弱性を自動的にテスト カラー出力 : 脆弱なルートと非脆弱なルートを明確に示す視覚的インジケーター シンプルな CLI インターフェース : 使いやすいコマンドライン引数 複数ヘッダーテスト :...