Photoview through 2.4.0 SQL Injection via album download route
CVE-2026-96673
Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated
#advisory
共收录 23334 条相关情报。
← 返回所有主题Frappe ERPNext before 16.34.1 Unauthorized Method Invocation
CVE-2026-96672
Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_formula values refere
Isotope eCommerce through 2.9.10 SQL Injection via Backend Callbacks
CVE-2026-96600
Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate requ
Isotope eCommerce through 2.9.10 Weak Order Identifier Generation
CVE-2026-96599
Isotope eCommerce through 2.9.10 derives order identifiers from uniqid() instead of a cryptographically secure source, a
InvoiceShelf has cross-company user read/update IDOR that enables cross-tenant account takeover
CVE-2026-55610
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and
Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files
CVE-2026-92164
Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSes
Solspace Freeform: Limited Twig template injection via submitted field values
CVE-2026-73858
### Summary A limited server-side Twig template injection issue was identified in Solspace Freeform for Craft CMS. In a
Solspace Freeform: Limited Twig template injection via submitted field values
CVE-2026-73858
Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. From 5.0.0 through 5.10.13, submitted
CVE-2026-96611
CVE-2026-96611
FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values f
WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePost
CVE-2026-88974
WPGraphQL provides a GraphQL API for WordPress sites. Prior to 2.22.2, the updatePost mutation in src/Mutation/PostObjec
REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates
CVE-2026-63000
REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_api_install_package_update in redaxo/src/addons/in
CVE-2026-96609
CVE-2026-96609
Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console lo
REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration
CVE-2026-62998
REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_list::getSortColumn() in redaxo/src/core/lib/list.
REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenames
CVE-2026-63002
REDAXO is a PHP-based content management system. Prior to 5.21.2, redaxo/src/addons/mediapool/pages/sync.php inserts fil
REDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse()`
CVE-2026-63001
REDAXO is a PHP-based content management system. Prior to 5.21.2, the mediaIsInUse() handler in redaxo/src/addons/media_
scim-patch: Mutation of Inherited Built-in Method Objects
CVE-2026-61834
scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and as
SunEditor: Critical XSS vulnerability - sanitizer bypass
CVE-2026-59167
SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 2.47.11, the
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel
CVE-2026-96560
LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pd_t
Reachy Mini Bluetooth PIN authentication can be bypassed by racing an authenticated device
CVE-2026-96456
The Reachy Mini Bluetooth service asks a connecting device for a PIN before it will accept commands. The check protects
Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint
CVE-2026-96455
The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in