@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag
CVE-2026-53608
### Summary The `@apostrophecms/seo` package injects the Google Analytics Tracking ID (`seoGoogleTrackingId`) and Go
2026-08-01 归档
今日共收录 1220 条安全情报，包含 330 个 CVE，503 篇安全通告，以及 110 篇研究论文。
← 返回归档列表@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header
CVE-2026-53607
### Summary When `prettyUrls: true` is enabled on `@apostrophecms/file` (a documented SEO feature for serving uploaded
An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary...
CVE-2026-51785
An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted req
PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery ...
CVE-2026-50986
PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery (CSRF). The payment valid
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10,...
CVE-2026-38713
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10,...
CVE-2026-38708
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2
TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in...
CVE-2026-38710
TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock in
SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin...
CVE-2025-69948
SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/delete_group.php?id=1.
SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php...
CVE-2025-69946
SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters distr
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10,...
CVE-2026-38711
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd
CVE-2026-18321
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd
free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure
CVE-2026-53551
### Summary The free5GC AUSF (Authentication Server Function) does not validate the `supiOrSuci` field in UE authentica
Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers
CVE-2026-53599
## Summary `rex_mediapool::isAllowedExtension` in `redaxo/src/addons/mediapool/lib/mediapool.php` accepts filenames th
ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow
CVE-2026-53466
An integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read and that can res
Savon::Model evaluates WSDL operation names as Ruby source
CVE-2026-53510
### Impact `Savon::Model` generated SOAP operation methods by interpolating operation names into Ruby source passed to
Jodit has prototype pollution via Jodit.configure() / ConfigMerge
CVE-2026-54756
### Summary `Jodit.configure(options)` — and the internal `ConfigMerge` / `ConfigProto` helpers — merged user-supplied o
Thumbor has path traversal via post-validation URL decoding bypass in file_loader
CVE-2026-53502
The file_loader performs `unquote()` on the file path AFTER the `abspath() + startswith()` security check. An attacker c
Thumbor proportion filter allows unbounded post-transform resize leading to remote DoS
CVE-2026-53505
### Summary Thumbor's `filters:proportion()` filter does not enforce an upper bound on `` and runs in the post-transform
Thumbor has Regex Denial of Service (ReDoS) in `convolution` filter
CVE-2026-53504
### Summary The regular expression used to parse the `convolution` filter exhibits exponential-time backtracking for cer
Thumbor convolution filter allows divide-by-zero in C extension leading to remote DoS
CVE-2026-53503
### Summary Thumbor's `filters:convolution(, , )` filter passes the user-controlled `` value to a C extension (`thumbor/