2436 matches found
PhotoPrism StartIndexing path traversal (index endpoint escapes the originals directory)
PhotoPrism StartIndexing path traversal index endpoint escapes the originals directory Vulnerability Overview PhotoPrism's indexing feature allows specifying the subdirectory to scan via the path parameter of POST /api/v1/index. Before the fix, when this path was joined with the media library roo...
PhotoPrism global preview/download tokens bypass resource visibility boundaries
PhotoPrism global preview/download tokens bypass resource visibility boundaries Vulnerability Overview PhotoPrism loads thumbnails and file downloads via simple URLs that cannot carry authentication headers preview/download tokens in query parameters or paths, validated by an in-memory token look...
WebKit single-bug RCE: crafted web content yields AAR/AAW/PC-hijack in content process
Summary A memory-corruption vulnerability in Apple's WebKit engine is reachable from maliciously crafted web content. Apple's public advisory understates the impact as an "unexpected process crash" and notes it was addressed with improved memory handling. In practice the bug is a single-shot remo...
Linux kernel FDDI: short frames parsed before header length validation cause out-of-bounds read
Linux kernel FDDI: short frames parsed before header length validation cause out-of-bounds read Vulnerability Overview The Linux kernel FDDI receive path parses FDDI/LLC/SNAP header fields before verifying that the skb contains enough bytes, so malformed short frames can trigger an out-of-bounds...
Linux kernel nft_inner: IPv6 inner_thoff desynchronization causes firewall bypass
Linux kernel nftinner: IPv6 innerthoff desynchronization causes firewall bypass Vulnerability Overview In the Linux kernel netfilter nftables inner expression, when parsing an inner IPv6 packet, ipv6findhdr first correctly computes the transport-layer offset including extension headers, but the...
Redis: undisclosed vulnerability (ZAI-2026-7FQ3CB)
Not disclosed. Details are not yet publicly disclosed...
Sogou Browser: undisclosed vulnerability (ZAI-2026-DFWIYP)
Not disclosed. Details are not yet publicly disclosed...
RT-Thread: undisclosed vulnerability (ZAI-2026-RQA8QG)
Not disclosed. Details are not yet publicly disclosed...
Knot Resolver: undisclosed vulnerability (ZAI-2026-HFI2PO)
Not disclosed. Details are not yet publicly disclosed...
Suricata: undisclosed vulnerability (ZAI-2026-MGWFQ4)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-OVFGZN)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-WLIMQP)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-OTTOUS)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-C0Z5QC)
Not disclosed. Details are not yet publicly disclosed...
pdnsd: undisclosed vulnerability (ZAI-2026-BFR6N4)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-H6KAFF)
Not disclosed. Details are not yet publicly disclosed...
OpenClaw: undisclosed vulnerability (ZAI-2026-6ZQL09)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-SY1D2L)
Not disclosed. Details are not yet publicly disclosed...
lwIP: undisclosed vulnerability (ZAI-2026-7FCWBF)
Not disclosed. Details are not yet publicly disclosed...
Smartbi: undisclosed vulnerability (ZAI-2026-XXZN8R)
Not disclosed. Details are not yet publicly disclosed...
libevent: undisclosed vulnerability (ZAI-2026-03V2QU)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-CY74TK)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-OIPTPJ)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-PWEC79)
Not disclosed. Details are not yet publicly disclosed...
Linux: undisclosed vulnerability (ZAI-2026-PT3XIF)
Not disclosed. Details are not yet publicly disclosed...
ZenTao: undisclosed vulnerability (ZAI-2026-ZHTOTM)
Not disclosed. Details are not yet publicly disclosed...
Superhuman: undisclosed vulnerability (ZAI-2026-HVZBCH)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-3S29Q5)
Not disclosed. Details are not yet publicly disclosed...
MongoDB: undisclosed vulnerability (ZAI-2026-8ITNC4)
Not disclosed. Details are not yet publicly disclosed...
Smartbi: undisclosed vulnerability (ZAI-2026-XDQX7X)
Not disclosed. Details are not yet publicly disclosed...
Nacos: undisclosed vulnerability (ZAI-2026-YRSAG7)
Not disclosed. Details are not yet publicly disclosed...
RT-Thread: undisclosed vulnerability (ZAI-2026-LX35Y4)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-TQGI0J)
Not disclosed. Details are not yet publicly disclosed...
JeecgBoot: undisclosed vulnerability (ZAI-2026-48YTJB)
Not disclosed. Details are not yet publicly disclosed...
Oracle Real Application Clusters DB Home: undisclosed vulnerability (ZAI-2026-BNPM81)
Not disclosed. Details are not yet publicly disclosed...
Microsoft Edge: undisclosed vulnerability (ZAI-2026-O86O6X)
Not disclosed. Details are not yet publicly disclosed...
FortiClient: undisclosed vulnerability (ZAI-2026-1VZJWO)
Not disclosed. Details are not yet publicly disclosed...
Greenhouse: undisclosed vulnerability (ZAI-2026-BY5B11)
Not disclosed. Details are not yet publicly disclosed...
Stripe: undisclosed vulnerability (ZAI-2026-0T5LSJ)
Not disclosed. Details are not yet publicly disclosed...
Frappe list filter values rendered unescaped, leading to XSS
Frappe List Filter Values Rendered Unescaped, Leading to XSS Vulnerability Overview When rendering the search/filter template of the website-side list view in Frappe Framework, the search keywords from the query string and the page path are embedded directly into the HTML output, with key positio...
Frappe Prepared Report / Query Report bypass subject, owner and row-level permission checks to read other users' report data
Frappe Prepared Report / Query Report Bypass Permission Checks to Read Other Users' Report Data Vulnerability Overview Query Report in Frappe Framework supports background pre-generation Prepared Report: the query is executed with the initiating user's privileges and the result is persisted for...
DokuWiki authplain modifyUser regex injection can delete other users' accounts
DokuWiki authplain modifyUser regex injection can delete other users' accounts Vulnerability Overview When DokuWiki uses the built-in authplain authentication backend, user profiles are stored in the users.auth.php file, and the modifyUser operation triggered by a user updating their profile...
NocoDB leaks other creators' private integration configuration when includeConfig is omitted
NocoDB Private Integration Configuration Information Disclosure Vulnerability Overview NocoDB's workspace-level Base Integration read service has an authorization logic flaw in its handling of the includeConfig request parameter: the check that "a private integration's configuration is visible on...
Linux kernel 6LoWPAN: off-by-one in multicast context address compression leaks a stack byte
Linux kernel 6LoWPAN: off-by-one in multicast context address compression leaks a stack byte Vulnerability Overview The Linux kernel 6LoWPAN IPHC multicast context address compression path contains an off-by-one error and uses a wrong memcpy offset, corrupting the RIID field of compressed multica...
GStreamer: undisclosed vulnerability (ZAI-2026-37MCBU)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-OVAUH4)
Not disclosed. Details are not yet publicly disclosed...
memcached: undisclosed vulnerability (ZAI-2026-NPWI7E)
Not disclosed. Details are not yet publicly disclosed...
OpenVPN: undisclosed vulnerability (ZAI-2026-YJ75A0)
Not disclosed. Details are not yet publicly disclosed...