CVE-2024-34352

1Panel is an open source Linux server operation and maintenance management panel. Prior to v1.10.3-lts, there are many command injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. The mirror configuration write symbol...

CVE-2021-41764

Streama (self-hosted streaming server) has a CSRF vulnerability (CVE-2021-41764) affecting version up to v1.10.3. The issue arises because CSRF checks are not performed when performing actions such as uploading local files, enabling an attacker to induce a logged-in administrator to upload arbitr...

CVE-2017-1000426

MapProxy 1.10.3 and earlier is vulnerable to cross-site scripting in the demo service, potentially leading to information disclosure. The issue affects MapProxy’s demo endpoint and is documented across multiple feeds; a partial fix was released in 1.10.4 and a complete fix in 1.11.1. Recommended ...