Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in...
CVE-2026-56325
Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in the preview subdomain r
2026-06-21 归档
今日共收录 748 条安全情报，包含 44 个 CVE，388 篇安全通告，以及 64 篇研究论文。
← 返回归档列表picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing...
CVE-2026-56304
picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to cr
Capgo before 12.128.2 contains an open redirect vulnerability in stripe_portal and...
CVE-2026-56330
Capgo before 12.128.2 contains an open redirect vulnerability in stripe_portal and stripe_checkout endpoints that accept
Capgo before 12.128.2 contains an authorization bypass vulnerability in webhook management...
CVE-2026-56295
Capgo before 12.128.2 contains an authorization bypass vulnerability in webhook management endpoints that allows non-exp
Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that...
CVE-2026-56332
Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that allows attackers to re
Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated ...
CVE-2026-56282
Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /replication endpoint that
capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where...
CVE-2026-56294
capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSuc
Capgo before 12.128.2 fails to enforce a maximum value on the minimum password length field in...
CVE-2026-56228
Capgo before 12.128.2 fails to enforce a maximum value on the minimum password length field in its password policy confi
Cap-go capgo before 12.128.2 contains an authorization bypass in several Supabase PostgREST RPC...
CVE-2026-56235
Cap-go capgo before 12.128.2 contains an authorization bypass in several Supabase PostgREST RPC functions (get_app_metri
Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded...
CVE-2026-56218
Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded images, allowing informa
Capgo before 12.128.2 contains a server-side request forgery vulnerability in webhook URL...
CVE-2026-56227
Capgo before 12.128.2 contains a server-side request forgery vulnerability in webhook URL validation that allows loopbac
Flowise before 3.0.13 contains an information exposure vulnerability in the POST /api/v1/account...
CVE-2026-56267
Flowise before 3.0.13 contains an information exposure vulnerability in the POST /api/v1/account/forgot-password endpoin
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability...
CVE-2026-12673
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalati
WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows...
CVE-2020-37255
WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attack
A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the...
CVE-2026-48939
A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature
SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without...
CVE-2026-48909
SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauth
A vulnerability in the SP Page Builder for Joomla allows the upload of arbitrary files for...
CVE-2026-48908
A vulnerability in the SP Page Builder for Joomla allows the upload of arbitrary files for unauthenticated users, ultima
The Simple File List plugin for WordPress is vulnerable to unauthorized file operations due to a...
CVE-2026-12119
The Simple File List plugin for WordPress is vulnerable to unauthorized file operations due to a missing authorization c
The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to...
CVE-2026-11912
The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to insufficient authorization
The Simple File List plugin for WordPress is vulnerable to arbitrary file deletion due to...
CVE-2026-11911
The Simple File List plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validat