ASUS DSL-AC88U - Authentication Bypass

A vulnerability in the ASUS DSL-AC88U router permits unauthorized individuals to bypass authentication.When adding "/js/..%2f%2f" or "/images/..%2f%2e" to the requested URL, it will be recognized as passing the authentication.This vulnerability is part of a broader authentication bypass issue...

Twenty-Three-Scanner

🛰️ Twenty-Three Scanner Telnetd サービスの脆弱性 CVE-2026-24061 を検出するための、強力 かつ高速 で洗練された スキャナーです。純粋な Python 標準ライブラリのみで構築されており、外部依存関係は一切不要です。 -A32D2A?style=for-the-badge 🔗 目次 ⚖️ ライセンス 🧩 機能 ☣️ 脆弱性の詳細 ⚡ サービスステータス 🧪 概念実証 PoC 💥 影響を受けるバージョン 🧵 修正済みバージョン ⚔️ 攻撃ベクトル 🚨 CVSS スコア 🛠️ インスト...

CVE-2026-26720-Twenty-RCE

Twenty CRM - 認証済みリモートコード実行（RCE） 概要 製品: Twenty CRM 脆弱性: サーバーレスワークフロー関数を介したリモートコード実行（RCE） 深刻度: 重大 影響を受けるコンポーネント: ワークフロー自動化（コード - サーバーレス関数） テスト済みバージョン: v1.15.0 このリポジトリは、Twenty CRM ワークフローエンジンにおける重大な脆弱性を文書化したものです。「コード - サーバーレス関数」コンポーネントは、認証済みユーザーが任意の Node.js...

ROOT-OS-ALPINE-321-CVE-2026-9545 CVE-2026-9545 in curl - Patched by Root

Root has patched CVE-2026-9545 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2025-3277 CVE-2025-3277 in sqlite - Patched by Root

Root has patched CVE-2025-3277 in the sqlite package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2024-10525 CVE-2024-10525 in mosquitto - Patched by Root

Root has patched CVE-2024-10525 in the mosquitto package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2024-3935 CVE-2024-3935 in mosquitto - Patched by Root

Root has patched CVE-2024-3935 in the mosquitto package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2024-8376 CVE-2024-8376 in mosquitto - Patched by Root

Root has patched CVE-2024-8376 in the mosquitto package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2023-40305 CVE-2023-40305 in indent - Patched by Root

Root has patched CVE-2023-40305 in the indent package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-322-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root

Root has patched CVE-2026-8924 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2026-6846 CVE-2026-6846 in binutils - Patched by Root

Root has patched CVE-2026-6846 in the binutils package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2026-3442 CVE-2026-3442 in binutils - Patched by Root

Root has patched CVE-2026-3442 in the binutils package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2025-5245 CVE-2025-5245 in binutils - Patched by Root

Root has patched CVE-2025-5245 in the binutils package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2025-70873 CVE-2025-70873 in sqlite - Patched by Root

Root has patched CVE-2025-70873 in the sqlite package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2023-46045 CVE-2023-46045 in graphviz - Patched by Root

Root has patched CVE-2023-46045 in the graphviz package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-3441 CVE-2026-3441 in binutils - Patched by Root

Root has patched CVE-2026-3441 in the binutils package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2024-8006 CVE-2024-8006 in libpcap - Patched by Root

Root has patched CVE-2024-8006 in the libpcap package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-322-CVE-2026-3441 CVE-2026-3441 in binutils - Patched by Root

Root has patched CVE-2026-3441 in the binutils package for Root:Alpine:3.22. Multiple fixed versions available...

CVE-2026-85055

Twenty is an open-source CRM customer relationship management platform. Prior to 2.22.0, field-level read permission is enforced on selected output fields but not on GraphQL or REST filter predicates. A workspace member or API key with permission to read an object but not a particular field can...

CVE-2026-85055

Twenty is an open-source CRM platform. Prior to version 2.22.0 , field-level read permissions are enforced on selected output fields but not on GraphQL or REST filter predicates . A workspace member or API key with object-level read access but denied field-level access can reference the restricte...