MantisBT is Vulnerable to Stored XSS in Custom Field Textarea Values

CVE-2026-39960

Improper escaping of a textarea custom field's contents in the Update Issue page (bug_update_page.php) allows an attacke

历史摘要 · 未重新核验 · GitHub Advisory

Yii 2: Local file inclusion via view parameter name collision

CVE-2026-39850

The core view rendering method `View::renderPhpFile()` calls `extract($_params_, EXTR_OVERWRITE)` before the `require` s

历史摘要 · 未重新核验 · GitHub Advisory

MantisBT: Bugnote Revision Page Leaks Private Issue Metadata After Issue Access Is Revoked

CVE-2026-34970

MantisBT allows a bugnote author to access the note's Revisions page after losing access to the parent private issue. #

历史摘要 · 未重新核验 · GitHub Advisory

MantisBT has an Authorization Bypass that Allows Uploading Attachments to Private Issues via REST API

CVE-2026-34754

### Impact MantisBT allows an authenticated user to upload attachments to private Issues they are not authorized to acce

历史摘要 · 未重新核验 · GitHub Advisory

MantisBT has an authorization bypass that allows reading attachments after losing access to a private issue

CVE-2026-34744

MantisBT permits a user to list and download their own attachments from an Issue created by another user, even after tha

历史摘要 · 未重新核验 · GitHub Advisory

MantisBT has an authorization bypass in private issue monitoring

CVE-2026-34579

Using a crafted POST request to bug_monitor_add.php, a user with project-level access can add themselves as a monitor fo

历史摘要 · 未重新核验 · GitHub Advisory

MantisBT is Vulnerable to Stored HTML Injection/XSS in Clone Issue Form

CVE-2026-34463

When cloning an issue originating from a Project other than the current one, the clone form (bug_report_page.php) prepen

历史摘要 · 未重新核验 · GitHub Advisory

MantisBT Vulnerable to Privilege Escalation from Manager to Administrator

CVE-2026-34390

Insufficient access control checks in _ProjectUsersAddCommand_ (used in *manage_proj_user_add.php* and REST API endpoint

历史摘要 · 未重新核验 · GitHub Advisory

MantisBT Has Authorization Bypass in Global Profile Creation

CVE-2026-33052

MantisBT allows a low-privileged authenticated user having *add_profile_threshold* to create a global profile despite no

历史摘要 · 未重新核验 · GitHub Advisory

torrentpier has PHP Serialize Injections

### Summary Hi, there. We've found PHP Serialize Injections in your project “torrentpier". According to the OWASP, it ca

历史摘要 · 未重新核验 · GitHub Advisory

Snipe-IT has an open redirect vulnerability

CVE-2026-44833

Open redirect vulnerability in Snipe-IT allows attackers to redirect users to malicious sites via unvalidated HTTP Refer

历史摘要 · 未重新核验 · GitHub Advisory

Phpseclib needs guardrails on large binaryfield integers

CVE-2023-49316

### Impact Anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc) ### Patch

历史摘要 · 未重新核验 · GitHub Advisory

Snipe-IT has insecure permissions in file uploads

CVE-2026-37709

Insecure Permissions vulnerability in grokability snipe-it versions through 8.4.0, fixed after 2026-03-10 commit 676a995

历史摘要 · 未重新核验 · GitHub Advisory

Snipe-IT has Privilege Escalation via API Permissions Assignment

CVE-2026-44832

### Impact An authenticated user with only `users.edit` permission can escalate their own privileges to `admin` by sendi

历史摘要 · 未重新核验 · GitHub Advisory

Snipe-IT has Stored XSS via Component Checkout Notes (v8.4.0)

CVE-2026-44831

### Impact Users with component view access could be impacted by an unescaped `notes` column. ### Patches This was pat

历史摘要 · 未重新核验 · GitHub Advisory

Kimai has an arbitrary file read in its invoice PDF renderer (admin)

CVE-2026-44298

## Summary Users with the role `System-Admin` (`ROLE_SYSTE_ADMIN`) and the permission `upload_invoice_template` can upl

历史摘要 · 未重新核验 · GitHub Advisory

Grav: Stored XSS via page title (data[header][title]) in admin panel

CVE-2026-44737

### Summary _A Stored Cross-Site Scripting (XSS) vulnerability was identified in the /admin/pages/[page] endpoint of the

历史摘要 · 未重新核验 · GitHub Advisory

Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy

## Summary In version 5.3.0 of the Symfony bundle, `Webauthn\Bundle\Policy\ClientOverridePolicy` defaulted to allowing

历史摘要 · 未重新核验 · GitHub Advisory

FacturaScripts Vulnerable to Authenticated Remote Code Execution (RCE) via GIF Image Upload in Product Images

CVE-2026-42879

# CVE-2026-42879 - FacturaScripts - Authenticated Unrestricted File Upload via MIME Type Bypass ## Summary An authen

历史摘要 · 未重新核验 · GitHub Advisory

FacturaScripts Vulnerable to Unauthenticated phpinfo() Disclosure via Installer Endpoint

CVE-2026-42878

### Summary An unauthenticated information disclosure vulnerability in the Installer controller allows any remote attack

历史摘要 · 未重新核验 · GitHub Advisory