Lucene search
+L

434092 matches found

EUVD
EUVD
added yesterday5 views

EUVD-2026-60601

Grav before 2.0.14 fails to guard the access field in the core group blueprint with the required security@: admin.super restriction. A delegated admin.users operator can save a group with accessadminsuper=true to escalate to super-admin, gaining scheduler and Twig evaluation capabilities...

9.3CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
added yesterday5 views

EUVD-2026-60602

DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in INPLACE sanitization where element-removal hooks fail to neutralize detached subtrees. Attackers can supply HTML with event handlers on descendant elements that execute after sanitization completes, even though the returned...

5.1CVSS5.1AI score
SaveExploits0References2
EUVD
EUVD
added yesterday5 views

EUVD-2026-60600

The Grav API plugin getgrav/grav-plugin-api, bundled with Grav's admin-next/API stack before 1.0.14 fails to enforce the authorize requirement in MenubarController::executeAction. While the GET /menubar/items listing endpoint correctly filters menubar items via userPassesAuthorize, the POST...

8.8CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added yesterday4 views

EUVD-2026-60599

Grav API plugin getgrav/grav-plugin-api before 1.0.14 contains a missing authorization vulnerability in userPassesAuthorize AbstractApiController.php. The function fails to consult the calling request's API key scopes, relying instead on the account's raw super-admin flag and ACL grants. As a...

9.3CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
added yesterday5 views

EUVD-2026-60598

Grav before 2.0.14 contains a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. All XSS detection patterns use the PCRE /u UTF-8 modifier, so a single invalid UTF-8 byte anywhere in page content causes pregmatch to return false for...

5.4CVSS4.9AI score
SaveExploits0References2
EUVD
EUVD
added yesterday4 views

EUVD-2026-60597

The Grav API plugin getgrav/grav-plugin-api, bundled with Grav 2.0's admin-next/API stack before version 1.0.14 contains an open redirect weakness in SsoController::sanitizeReturnTo. The function rejects a literal '//' prefix but does not account for browsers normalizing backslashes to slashes in...

8.6CVSS5.3AI score
SaveExploits0References2
EUVD
EUVD
added yesterday6 views

EUVD-2026-60596

The Grav API plugin getgrav/grav-plugin-api, bundled with Grav 2.0 before version 1.0.14 fixed in 1.0.15 contains a missing authorization vulnerability in BlueprintPathResolver::resolveUserScope. The method gates the users/ scope on the account's raw super-admin ACL flag access.api.super instead ...

9.3CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added yesterday6 views

EUVD-2026-60595

Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the audio and video media rendering through the sourceParsedownElement method. The media URL fragment is concatenated unescaped into rawHtml source elements, allowing attackers to inject arbitrary HTML and JavaScript that...

7.6CVSS5.2AI score
SaveExploits0References3
EUVD
EUVD
added yesterday6 views

EUVD-2026-60594

grav-plugin-api getgrav/grav-plugin-api versions = 1.0.0-beta.10 and = 1.0.14 contain a path traversal vulnerability in the PagesController::batchCopy method. An incomplete fix for GHSA-qjq4-jp55-4mx2 left the user-controlled 'suffix' parameter via POST /api/v1/pages/batch unvalidated. An...

7.1CVSS5.6AI score
SaveExploits0References2
EUVD
EUVD
added yesterday5 views

EUVD-2026-60592

Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the detectXss function where unpaired quotes in unquoted attribute values bypass event-handler detection. Authenticated editors can inject event handlers like onerror= that pass validation and execute in visitor browsers...

9.3CVSS5AI score
SaveExploits0References2
EUVD
EUVD
added yesterday6 views

EUVD-2026-60593

grav-plugin-api versions before 1.0.15 fail to validate Twig content in the translate endpoint, allowing attackers with api.pages.write permission to persist pages with process.twig enabled. Attackers can submit crafted header and content parameters to execute server-side template injection...

8.6CVSS5.6AI score
SaveExploits0References2
EUVD
EUVD
added yesterday4 views

EUVD-2026-60591

Grav before 2.0.15 contains an arbitrary file write vulnerability in the Blueprint dynamic-data bare-function validation that uses an incomplete denylist instead of a positive allowlist. Attackers with page-edit or blueprint-config access can invoke the errorlog function through a data directive ...

9.3CVSS6.1AI score
SaveExploits0References2
EUVD
EUVD
added yesterday5 views

EUVD-2026-60590

Grav Form Plugin before 9.1.19 fails to escape field-definition properties including prepend, append, spacer text, section text, and select option labels in form templates. Attackers with form authoring privileges can inject arbitrary HTML and JavaScript that executes for all form visitors throug...

5.4CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added yesterday4 views

EUVD-2026-60589

Grav plugin-api before 1.0.15 contains a script injection vulnerability where the SVG sanitizer only checks for the exact extension 'svg', allowing .svgz and .xhtml files to bypass sanitization and be stored unsanitized. Attackers with api.media.write permission can upload files containing...

5.1CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
added yesterday2 views

EUVD-2026-60588

Grav before 2.0.15 contains a path traversal vulnerability in the static asset server within index.php that uses string prefix matching instead of directory-boundary validation. Unauthenticated attackers can access files in sibling directories by exploiting directory names that extend the base pa...

8.2CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
added yesterday5 views

EUVD-2026-60587

SiYuan before v3.7.4 contains an incorrect authorization vulnerability in eight publish-mode reader-facing endpoints that filter results using the visibility list instead of the disabled list. Anonymous visitors can discover and read content from documents explicitly marked as forbidden from...

8.7CVSS5.3AI score
SaveExploits0References2
EUVD
EUVD
added yesterday3 views

EUVD-2026-60586

SiYuan before v3.7.4 contains a server-side request forgery SSRF vulnerability in the isPrivateIP function in kernel/util/net.go, used by SSRFSafeDialer to enforce SSRF protection in SafeMode. The function only checks for loopback, link-local unicast, private, and unspecified addresses and does n...

7.1CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added yesterday3 views

EUVD-2026-60585

SiYuan before v3.7.4 is missing authorization checks in 17 block metadata/content endpoints in kernel/api/block.go including getRefText, checkBlockExist, and getBlockBreadcrumb. These handlers are gated only by basic authentication model.CheckAuth and lack publish-access filtering, allowing...

8.7CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
added yesterday3 views

EUVD-2026-60584

SiYuan before v3.7.4 contains an insufficient access control vulnerability in the /api/lute/spinBlockDOM endpoint, which is guarded only by CheckAuth middleware instead of CheckAdminRole like its sibling endpoint. Authenticated users with RoleEditor or RoleReader roles can invoke the endpoint to...

5.3CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added yesterday5 views

EUVD-2026-60583

SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file upload validation flow that fails to escape filenames before inserting them into HTML via insertAdjacentHTML. Attackers can craft a malicious filename containing script payloads that execute with full OS command access...

9.3CVSS5.1AI score
SaveExploits0References2
EUVD
EUVD
added yesterday2 views

EUVD-2026-60582

A vulnerability was determined in karakeep-app karakeep up to 0.32.0. The impacted element is an unknown function of the file apps/web/server/auth.ts of the component OAuth Sign-In. This manipulation causes improper authentication. It is possible to initiate the attack remotely. The complexity of...

6.3CVSS4.5AI score
SaveExploits0References6
EUVD
EUVD
added yesterday6 views

EUVD-2026-60581

A flaw was found in the group policy provider of Keycloak authorization services, which is used to manage fine-grained access control to resources. The issue occurs when the system evaluates group-based policies using tokens that only contain group names rather than full paths. If two groups in...

5.3CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
added yesterday5 views

EUVD-2026-60580

A vulnerability was found in karakeep-app karakeep up to 0.32.0. The affected element is the function authorize of the file apps/web/server/auth.ts of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be performed...

6.3CVSS4.7AI score
SaveExploits0References8
EUVD
EUVD
added yesterday6 views

EUVD-2026-60579

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fileorbis Informatics Services Trade Inc. FileOrbis allows Stored XSS. This issue affects FileOrbis: before 16.5...

5.4CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added yesterday4 views

EUVD-2026-60577

SpiderFoot fails to HTML-escape correlation titles built from external scan data sources including server banners and metadata. Attackers can inject malicious HTML elements with event handlers into correlation results that execute scripts in the operator's browser when the correlations view is...

9.3CVSS5.5AI score
SaveExploits0References4
EUVD
EUVD
added yesterday6 views

EUVD-2026-60578

Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated attackers to bypass authentication filters by prefixing requests with arbitrary path segments. Attackers can access administrative controllers to read user listings, create manager...

9.8CVSS5.5AI score
SaveExploits0References5
EUVD
EUVD
added yesterday6 views

EUVD-2024-55726

A security vulnerability has been detected in OpenBoxes up to 0.9.1. This issue affects the function DocumentController of the file grails-app/controllers/org/pih/warehouse/core/DocumentController.groovy of the component Document Upload Controller. The manipulation leads to unrestricted upload. I...

6.5CVSS6AI score
SaveExploits0References9
EUVD
EUVD
added yesterday7 views

EUVD-2026-60574

Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...

6.9CVSS5.4AI score
SaveExploits0References3
EUVD
EUVD
added yesterday6 views

EUVD-2026-60573

Improper Encoding or Escaping of Output vulnerability in ninenines cowlib allows Link header directive smuggling via unescaped special characters in cowlink:link/1. cowlink:dolink/1 in cowlib interpolates the target URI, rel value, and attribute keys directly into the serialized Link: header valu...

6.3CVSS5.5AI score0.00324EPSS
SaveExploits0References3
EUVD
EUVD
added yesterday5 views

EUVD-2024-55724

A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Product Supplier Edit Controller. Executing a manipulation can lead to improper authorization. The attack m...

6.5CVSS6.1AI score0.00245EPSS
SaveExploits0References9
EUVD
EUVD
added yesterday5 views

EUVD-2026-60572

SSRF via setskywalkingurl Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...

5.3AI score0.00238EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-60571

Velociraptor's web GUI allows specifying a custom type for columns in tables. The URL type takes the cell value and forms a URL which can be clicked in the GUI.The code does not limit the schemes allowed in this URL , allowing an attacker to specify a JavaScript scheme exposing the user to XSS...

8.1CVSS5.4AI score0.00207EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-60569

The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handlefileupload function. This is due to insufficient file type validation in handlefileupload, where the dangerous-extension blocklist performs exact-key matchin...

9.8CVSS6.7AI score0.01177EPSS
SaveExploits2References7
EUVD
EUVD
added yesterday7 views

EUVD-2026-60570

The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

7.2CVSS5.5AI score0.00194EPSS
SaveExploits0References2
EUVD
EUVD
added yesterday9 views

EUVD-2026-60568

The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to...

7.5CVSS5.2AI score0.003EPSS
SaveExploits0References5
EUVD
EUVD
added yesterday9 views

EUVD-2026-60567

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be initiated remotely...

5.3CVSS4.6AI score0.00155EPSS
SaveExploits0References5
EUVD
EUVD
added yesterday8 views

EUVD-2026-60566

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptestssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. Th...

9.4CVSS8.1AI score0.02086EPSS
SaveExploits0References5
EUVD
EUVD
added yesterday7 views

EUVD-2026-60565

A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::fromrawdtalign of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely. T...

5.3CVSS5.1AI score0.00344EPSS
SaveExploits0References8
EUVD
EUVD
added yesterday10 views

EUVD-2026-60564

A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convertgguftohftokenizer of the file mistralrs-core/src/gguf/gguftokenizer.rs of the component GGUF Tokenizer. The manipulation of the argument eostokenid/bostokenid/unknowntokenid results...

5.3CVSS4.9AI score0.00515EPSS
SaveExploits0References9
EUVD
EUVD
added yesterday8 views

EUVD-2026-60563

A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/checkavailability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS7.3AI score0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added yesterday6 views

EUVD-2026-60562

A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and...

6.5CVSS6.5AI score0.00204EPSS
SaveExploits0References6
EUVD
EUVD
added yesterday8 views

EUVD-2026-60548

Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section...

5.3AI score0.00145EPSS
SaveExploits0References3
EUVD
EUVD
added yesterday9 views

EUVD-2026-60543

Mattermost Desktop App versions =6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the...

3.6CVSS5.3AI score0.00104EPSS
SaveExploits0References2
EUVD
EUVD
added yesterday11 views

EUVD-2026-60542

Mattermost versions 10.11.x = 10.11.20, 11.7.x = 11.7.5 Mattermost fails to remove thread membership records when a user is removed from or leaves a team, which allows a previously removed user who is later re-invited to the team to view private channel thread root post content and metadata via t...

3.5CVSS5.3AI score0.00156EPSS
SaveExploits0References2
EUVD
EUVD
added yesterday8 views

EUVD-2026-60546

Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated...

5.3AI score0.00145EPSS
SaveExploits0References3
EUVD
EUVD
added yesterday9 views

EUVD-2026-60545

A Server-Side Template Injection SSTI vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a crafted expression...

6AI score0.00271EPSS
SaveExploits1References6
EUVD
EUVD
added yesterday9 views

EUVD-2026-60557

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /editsubject1.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit...

7.5CVSS5.5AI score0.00263EPSS
SaveExploits0References7
EUVD
EUVD
added yesterday12 views

EUVD-2026-60547

An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...

6AI score0.00151EPSS
SaveExploits0References3
EUVD
EUVD
added yesterday10 views

EUVD-2026-60556

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /editsubject2.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made...

7.5CVSS5.6AI score0.00263EPSS
SaveExploits0References7
EUVD
EUVD
added yesterday8 views

EUVD-2026-60541

Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fail to enforce PermissionManageBoardRoles on the channelId field of the batch endpoint, which allows an authenticated board editor to relink any board they can edit to an arbitrary channel via a crafted PATCH request...

6.5CVSS5.5AI score0.00253EPSS
SaveExploits0References2
Total number of security vulnerabilities434092