151064 matches found
CVE-2026-86542
knowns before version 0.30.0 contains a path traversal vulnerability in its import routes. The server fails to validate the name parameter, allowing an unauthenticated remote attacker to supply traversal sequences that escape the imports directory and overwrite arbitrary files writable by the ser...
CVE-2026-86542 knowns before 0.30.0 Path Traversal via Import Name
knowns before 0.30.0 fails to validate import names in the import routes, allowing unauthenticated attackers to write files outside the imports directory. Attackers can supply traversal sequences in the name parameter to escape the imports directory and overwrite arbitrary files writable by the...
CVE-2026-86543 knowns before 0.30.0 Unauthenticated Management API Exposure
knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installations. Attackers can access the unauthenticated /api/tunnel/start endpoint to provision a public tunnel and republish the API at a publicl...
CVE-2026-86543
knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installations. An unauthenticated attacker can access the /api/tunnel/start endpoint to provision a public tunnel and republish the API at a publi...
CVE-2026-86538 knowns before 0.30.0 Path Traversal via templateFile parameter
knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates/preview endpoint that allows unauthenticated attackers to read arbitrary files. Attackers can supply directory traversal sequences in the templateFile parameter to bypass path restrictions and read...
CVE-2026-86538 knowns before 0.30.0 Path Traversal via templateFile parameter
knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates/preview endpoint that allows unauthenticated attackers to read arbitrary files. Attackers can supply directory traversal sequences in the templateFile parameter to bypass path restrictions and read...
CVE-2026-86538
Knowns versions prior to 0.30.0 are affected by a path traversal vulnerability in the POST /api/templates/preview endpoint. An unauthenticated attacker can supply directory traversal sequences in the templateFile parameter to bypass path restrictions and read arbitrary filesโsuch as credentials a...
CVE-2026-82758
ash_authentication_oauth2_server (ash-project, Elixir) has an Improper Authentication flaw in resolve_secret/3: any secret-provider return other than {:ok, _} or :error was treated as valid, wrapping nil, false, or "" as {:ok, value}. When the initial_access_token resolves to such an empty value,...
CVE-2026-82758 ash_authentication_oauth2_server treats an empty resolved secret as valid, opening the gated Dynamic Client Registration endpoint
Improper Authentication vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to register OAuth clients even when Dynamic Client Registration is gated by an initial access token. resolvesecret/3 in AshAuthentication.Oauth2Server reached through resolvesecre...
CVE-2026-82758 ash_authentication_oauth2_server treats an empty resolved secret as valid, opening the gated Dynamic Client Registration endpoint
Improper Authentication vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to register OAuth clients even when Dynamic Client Registration is gated by an initial access token. resolvesecret/3 in AshAuthentication.Oauth2Server reached through resolvesecre...
CVE-2026-82756 ash_authentication_oauth2_server interpolates a tenant-derived value into the WWW-Authenticate challenge without escaping, allowing header parameter injection
Improper Encoding or Escaping of Output vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to inject arbitrary authentication parameters into the WWW-Authenticate challenge header. BearerPlug and RequireScopePlug built the Bearer resourcemetadata="..."...
CVE-2026-82756
ash_authentication_oauth2_server (ash-project) is vulnerable to header parameter injection in its BearerPlug and RequireScopePlug. A tenant-derived resource_metadata URL is interpolated directly into the WWW-Authenticate challenge without escaping, allowing an unauthenticated attacker in a multi-...
EEF-CVE-2026-82756 ash_authentication_oauth2_server interpolates a tenant-derived value into the WWW-Authenticate challenge without escaping, allowing header parameter injection
Summary Improper Encoding or Escaping of Output vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to inject arbitrary authentication parameters into the WWW-Authenticate challenge header. BearerPlug and RequireScopePlug built the Bearer...
CVE-2026-82756 ash_authentication_oauth2_server interpolates a tenant-derived value into the WWW-Authenticate challenge without escaping, allowing header parameter injection
Improper Encoding or Escaping of Output vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to inject arbitrary authentication parameters into the WWW-Authenticate challenge header. BearerPlug and RequireScopePlug built the Bearer resourcemetadata="..."...
EUVD-2026-72538
Improper Encoding or Escaping of Output vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to inject arbitrary authentication parameters into the WWW-Authenticate challenge header. BearerPlug and RequireScopePlug built the Bearer resourcemetadata="..."...
CVE-2026-5118
๐ฅ CVE-2026-5118 Divi Form Builder ไธไธช้่ๅญๆฎตใไธไธช่ขซ็ฏกๆน็ๅผใ่ทๅพๆดไธช็ฝ็ซ็ๅฎๅ จ่ฎฟ้ฎๆ้ใ ๐งจ ๆปๅป่ ่ฝๅไปไน๏ผ ่ฝๅ| ๅฝฑๅ ---|--- ๐ ๆ ้็ปๅฝๅๅปบ็ฎก็ๅ่ดฆๆท| ๆด็ซๆฅ็ฎก ๐ฆ ่ฎฟ้ฎ WooCommerce ๅฎขๆทๆฐๆฎ| ๆฐๆฎๆณ้ฒ ๐ ็ผ่พๆไปถ/ไธป้ขๆไปถ๏ผPHP๏ผ| ่ฟ็จไปฃ็ ๆง่ก ๐ณ๏ธ ๅๅปบ้่ๅ้จ| ๆไน ๅ่ฎฟ้ฎ ๐ฅ ๆฅ็ๆๆ็จๆทๆฐๆฎ| ไพต็ฏ้็ง ๐ฌ ๆผๆดๅๆ ๆผๆดไฝ็ฝฎ root@kitploit: includes/shared/handlers/FormSubmissionHandler.php โ createuser ๆผๆดไปฃ็ ...
CVE-2026-82753 Unauthenticated authorize requests create unbounded, never-expiring CIMD client rows and cache entries in ash_authentication_oauth2_server
Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to exhaust database storage and memory. The /authorize endpoint is unauthenticated by design. With Client ID Metadata Documents enabled, resolveclient...
CVE-2026-82753
ash_authentication_oauth2_server (ash-project) suffers from an Allocation of Resources Without Limits or Throttling vulnerability in the /authorize endpoint when Client ID Metadata Documents (CIMD) are enabled. The resolve_client/3 function fetches a metadata document for each new URL-shaped clie...
EUVD-2026-72535
Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to exhaust database storage and memory. The /authorize endpoint is unauthenticated by design. With Client ID Metadata Documents enabled, resolveclient...
EEF-CVE-2026-82753 Unauthenticated authorize requests create unbounded, never-expiring CIMD client rows and cache entries in ash_authentication_oauth2_server
Summary Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to exhaust database storage and memory. The /authorize endpoint is unauthenticated by design. With Client ID Metadata Documents enabled,...