漏洞公告

Duplicate Advisory: Kirby vulnerable to self cross-site scripting (self-XSS) in the URL field

Withdrawn Advisory: Kirby CMS HTML injection vulnerability

Duplicate Advisory: Unrestricted file upload of user avatar images

Duplicate Advisory: SQL injection in pgjdbc

Duplicate Advisory: Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability

Duplicate Advisory: Svix vulnerable to improper comparison of different-length signatures

Duplicate Advisory: FastAPI Content-Type Header ReDoS

Duplicate Advisory: Starlette Content-Type Header ReDoS

Duplicate Advisory: Central Dogma Authentication Bypass Vulnerability via Session Leakage

livewire Cross-Site Request Forgery vulnerability

Duplicate Advisory: Discovery uses the same AES/GCM Nonce throughout the session

Duplicate Advisory: Hard-coded credentials in org.folio:mod-data-export-spring

Duplicate Advisory: Hard-coded credentials in org.folio:mod-remote-storage

Duplicate Advisory: JavaScript execution via malicious molfiles (XSS)

Duplicate Advisory: Sandbox escape in Artemis Java Test Sandbox

Duplicate Advisory: Inefficient Algorithmic Complexity in com.upokecenter:cbor

Duplicate Advisory: Improper Verification of Cryptographic Signature in aws-encryption-sdk-java

Duplicate Advisory: Sandbox escape in Artemis Java Test Sandbox

Duplicate Advisory: Session fixation in Enonic XP

Duplicate Advisory: Exposure of sensitive information in ClickHouse

Duplicate Advisory: Sandbox escape in Artemis Java Test Sandbox

Devise-Two-Factor vulnerable to brute force attacks

Duplicate Advisory: NuGet Client Security Feature Bypass Vulnerability