漏洞公告

EGroupware Vulnerable to Local File Inclusion via file:// URI in Mail Compose

ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

New API is vulnerable to CSRF through user email binding

EGroupware has Authenticated RCE via Malicious eTemplate Upload

XWiki Platform Old Core: Resource path traversal via /skin/ action endpoint in Jetty 12+

New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs

EGroupware has a Remote Code Execution Vulnerability

apache-airflow DAG source authorization bypass exposes co-located DAG source

showdown allows stored cross-site scripting through table header ID injection

cut: -s ignored in -z -d '' newline-delimiter mode

mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node)

mkfifo: permissions of an existing file are changed after FIFO creation fails

Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write

OpenRemote has Authenticated SQL Injection via Datapoint Crosstab Export

Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)

9router: Login brute-force protection bypass via spoofed X-Forwarded-For header

9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover

Craft CMS: Potential authenticated Remote Code Execution via referrer redirect

Craft CMS: Stored XSS via Structure entry title in table view

showdown metadata title handling allows cross-site scripting

Craft CMS: Sensitive File Disclosure / Server-Side File Read

Craft CMS: DOM XSS via GitHub issue title in CraftSupport widget

Kiwi TCMS has an Open Redirect via unvalidated next parameter in account confirmation endpoint