漏洞公告

Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover

devpi-server may leak database contents

MineAdmin Vulnerable to Path Traversal via Unsanitized identifier in Plugin Install/Uninstall

MONAI: Unsafe deserialization in NumpyReader allows arbitrary code execution via malicious .npy files

MONAI vulnerable to OS command injection

Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch

Triton VM Soundness Vulnerability due to Missing Constraint

jmespath.php has CompilerRuntime code injection via unescaped function names

membrane_mp4_plugin has an unauthenticated denial-of-service via BEAM atom table exhaustion

surfio has an out-of-bounds read

resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read

kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)

MeshCentral has unsanitized data fields

Keycloak: Unauthenticated account takeover via reset-credentials flow bypass

MobSF Vulnerable to Arbitrary File Read via Path Traversal in ZIP Uploads

MobSF's CSRF checks not enforced after Django migration

MobSF has SSRF port restriction bypass in assetlinks_check

MobSF Vulnerable to Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction

MagicMirror socket payload secret placeholder expansion can disclose SECRET_* environment variables

GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

LibreNMS Vulnerable to Remote Code Execution by Signal Alert Transportation module

MagicMirror: ssrf calendar .js

MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery