漏洞公告

Remote code execution in ruby-jss

Weak Password Recovery Mechanism for Forgotten Password in Strapi

Open Redirect in Apache Superset

Denial of Service (DoS) in mongo-express

S3 storage write is not aborted on errors leading to unbounded memory usage

Cross-site Scripting in Sidekiq

Cross-site Scripting in Froala Editor

BuddyPress privilege escalation via REST API

Deleted Admin Can Sign In to Admin Interface

Scrapy HTTP authentication credentials potentially leaked to target websites

ASP.NET Core Denial of Service Vulnerability

URL Redirection to Untrusted Site ('Open Redirect') in fastify-static

Buffer Overflow in Pillow

Authentication bypass for viewing and deletions of snapshots

Cross-Site-Request-Forgery in Backend

HTTP Host Header Injection

Improper escaping of command arguments on Windows leading to command injection

Code Injection in SLO Generator

Cobbler before 3.3.0 allows authorization bypass for modification of settings.

Cobbler before 3.3.0 allows log poisoning

Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.

Insufficiently restricted permissions on plugin directories

Expression injection in AviatorScript