githubFind3r

githubFind3r githubFind3r is a very fast command line repo/user/commit search tool enter image description here Installation git clone https://github.com/atmoner/githubFind3r.git cd githubFind3r npm install Run it node githubFind3r.js...

CVE-2024-7075

The user search function within the management console fails to properly encode user-supplied input before rendering it in the browser. This allows an attacker to inject malicious scripts that are then executed by the user's browser in the context of the management console. Successful exploitatio...

EUVD-2024-55833

The user search function within the management console fails to properly encode user-supplied input before rendering it in the browser. This allows an attacker to inject malicious scripts that are then executed by the user's browser in the context of the management console. Successful exploitatio...

CVE-2024-7075 Reflected Cross-Site Scripting via User Search Function in Management Console of Multiple WSO2 Products

The user search function within the management console fails to properly encode user-supplied input before rendering it in the browser. This allows an attacker to inject malicious scripts that are then executed by the user's browser in the context of the management console. Successful exploitatio...

CVE-2024-7075

Multiple WSO2 products are vulnerable to Reflected Cross-Site Scripting (XSS) via the user search function in the management console. The vulnerability stems from the failure to properly encode user-supplied input before it is rendered in the browser, allowing attackers to inject and execute mali...

CVE-2024-7075 Reflected Cross-Site Scripting via User Search Function in Management Console of Multiple WSO2 Products

The user search function within the management console fails to properly encode user-supplied input before rendering it in the browser. This allows an attacker to inject malicious scripts that are then executed by the user's browser in the context of the management console. Successful exploitatio...

PT-2026-135358

The user search function within the management console fails to properly encode user-supplied input before rendering it in the browser. This allows an attacker to inject malicious scripts that are then executed by the user's browser in the context of the management console. Successful exploitatio...

CVE-2024-7075: WSO2: The user search function within the management console fails to properly encode user-supplied input before rendering it…

The user search function within the management console fails to properly encode user-supplied input before rendering it in the browser. This allows an attacker to inject malicious scripts that are then executed by the user's browser in the context of the management console. Successful exploitatio...

CVE-2020-1958

CVE-2020-1958 PoC CVE-2020-1958 is high severity LDAP injection vulnerability in Apache Druid 0.17.0. It allows an attacker to bypass LDAP search filter and to retrieve any LDAP attribute values of users that exist on the LDAP server. From official Apache Druid advisory: When LDAP authentication ...

CVE-2026-119300

Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.js and the searchUsers method in server/models/users.js pass authenticated user-controlled searchTerm and query values to new RegExp without escaping regular-expression...

CVE-2026-119300 Wekan: ReDoS via Unescaped User Input in RegExp

Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.js and the searchUsers method in server/models/users.js pass authenticated user-controlled searchTerm and query values to new RegExp without escaping regular-expression...

EUVD-2026-114193

Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.js and the searchUsers method in server/models/users.js pass authenticated user-controlled searchTerm and query values to new RegExp without escaping regular-expression...

CVE-2026-119300

The open-source kanban application Wekan is vulnerable to a Regular Expression Denial of Service (ReDoS) in versions prior to 11.11 . The root cause is the lack of escaping for regular-expression metacharacters when authenticated users provide searchTerm and query values to the user-search public...

CVE-2026-119300: wekan: Wekan is open source kanban built with Meteor

Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.js and the searchUsers method in server/models/users.js pass authenticated user-controlled searchTerm and query values to new RegExp without escaping regular-expression...

PT-2026-133683

Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.js and the searchUsers method in server/models/users.js pass authenticated user-controlled searchTerm and query values to new RegExp without escaping regular-expression...

CVE-2026-118426

In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the LDAP user search and LDAP group search...

EUVD-2026-112580

In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the LDAP user search and LDAP group search...

CVE-2026-118426

In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the LDAP user search and LDAP group search...

CVE-2026-118426

In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user can call the LDAP user search and LDAP group search functions. This issue is categorized as a Missing Authorization vulnerability (CWE-862) and carries a CVSS 4.0 base score of 5.3 (Medium...

CVE-2026-118426: Octopus Deploy Octopus Server: In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call…

In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the LDAP user search and LDAP group search...