Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0...
CVE-2026-67360
Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5
#advisory
共收录 23508 条相关情报。
← 返回所有主题Joomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20,...
CVE-2026-67359
Joomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An unauth
Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4...
CVE-2026-74252
Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - J2
Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection...
CVE-2026-67361
Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.2
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
CVE-2026-77415
Before JSONata `2.2.1` and `1.8.8` it was possible to execute arbitrary code with crafted expressions, due to: - overwri
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
CVE-2026-77414
Before JSONata `2.2.1` and `1.8.8` it was possible to execute arbitrary code with crafted expressions, due to a bypassab
Hydra: hydra.utils.instantiate with untrusted config can lead to code execution
CVE-2026-68508
## Summary `hydra.utils.instantiate()` resolves and calls Python objects from config. If an application passes untruste
YOURLS has stored XSS in referrer statistics chart via crafted Referer header
CVE-2026-63135
### Summary YOURLS stores the HTTP `Referer` header for short URL redirects and later renders aggregated referrer domai
JSONata: Arbitrary Code Execution via crafted JSONata expressions
CVE-2026-77413
## Impact Before JSONata `2.2.0` and `1.8.8` it was possible to execute arbitrary code with crafted expressions, due to
kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding
CVE-2026-77354
### Summary An uncontrolled resource consumption vulnerability in `openapi3filter` lets any unauthenticated client forc
Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing
CVE-2026-61539
### Summary Xinference used Python's unsafe `eval()` function when parsing Llama3 tool-call output generated by a large
Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI leads to RCE)
CVE-2026-59989
## Summary The Volt template compiler in Phalcon generates the PHP for the `join` filter by string-concatenating the fi
kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS
CVE-2026-76905
### Summary A nil-pointer dereference in `openapi3filter.ConvertErrors` lets any unauthenticated client crash a server
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation
CVE-2026-64679
### Summary Atlantis versions `>= 0.19.8` and `< 0.45.0` did not consistently validate user-controlled `workspace` value
Keystone vulnerable to `graphql.maxTake` bypass with negative `take`
CVE-2026-63421
# Summary The value of `graphql.maxTake` can be bypassed by providing a negative input. This can be used to exceed the d
Defuddle vulnerable to XSS via unescaped attribute interpolation in site extractors
CVE-2026-61824
## Summary An Improper Neutralization of Input During Web Page Generation issue in the site extractor component allows
GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers
CVE-2026-76904
### Summary An SQL Injection Vulnerability has been found when executing OGC Filters with PostGIS DataStore implementat
Grav: Page editors can inject arbitrary script into rendered pages via the Twig sandbox's assets.addJs/addCss allowlist, escalating to super-admin
## Summary Grav 2.0 renders editor-authored Twig in page content by default and relies on the Twig content sandbox to c
Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username
CVE-2026-63466
## Vulnerability Details **File**: `src/lib/addons/feature-event-formatter-md.ts` **Line**: 355 (in v8.0.1; `format()`
Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request h...
CVE-2026-63004
## Summary Unleash's addon/integration subsystem lets an operator configure a webhook (and the Slack, Microsoft Teams,