Smarty: SSRF via redirect bypass of trusted_uri using {fetch}
CVE-2026-62993
When a Security policy is active, {fetch} validates the requested remote URL against the trusted_uri allowlist via Secur
#composer
共收录 517 条相关情报。
← 返回所有主题Kirby: System path exposure from error messages in the REST API
CVE-2026-69127
### TL;DR This vulnerability affects all Kirby sites that have not disabled the REST API with the `'api' => false` opti
Kirby: File upload permissions are not checked during processing of chunk data
CVE-2026-71415
### TL;DR This vulnerability affects all Kirby sites where users of a particular role have access to the REST API (`acc
Kirby: Access to image files and limited access to JSON files outside of the site root via path traversal in the media handling
CVE-2026-75594
### TL;DR This vulnerability affects all Kirby sites that are deployed to a server that allows requests for URLs with e
elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback
CVE-2026-81889
[poc.zip](https://github.com/user-attachments/files/30352020/poc.zip) ## Summary elFinder 2.1.69 is vulnerable to a Ser
TYPO3 CMS - Unrestricted File Upload in Form Framework
CVE-2026-15305
### Problem Users were able to upload files with arbitrary MIME types to forms using _FileUpload_ or _ImageUpload_ eleme
Snipe-IT has an Improper Privilege Management issue
CVE-2026-55843
## Impact The `update()` method in `UsersController` passes the `permission` request field unconditionally to `Normaliz
silverstripe/versioned has XSS in archive admin restore
CVE-2026-55779
### Impact It's possible to use the page title as an XSS vector when restoring a page in ArchiveAdmin ### Reporter Stev
PrivateBin has reflected JSON injection in backend responses via unescaped REQUEST_URI
CVE-2026-55891
## Vulnerability Details A reflected JSON injection allows an attacker to return arbitrary data in the JSON endpoints (
PrivateBin has stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction
CVE-2026-55696
### Summary Stored cross-site scripting (XSS) in PrivateBin's attachment download link. An anonymous attacker can creat
Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name
CVE-2026-55634
## Overview A DataObject **class-definition field name** is concatenated, without an identifier allowlist, into the PHP
Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column (PHP Object Injection, CWE-502)
CVE-2026-55220
## Summary `Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource()` deserializes the `*__hot
Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation
CVE-2026-55212
### Summary The Studio API class definition creation endpoint in `pimcore/studio-backend-bundle` is guarded by the `obje
Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes
CVE-2026-55208
## Summary An authenticated user extracts the admin password hash and any other database content through a time-based b
Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass
CVE-2026-55207
## Summary An unauthenticated attacker takes over any Pimcore admin account by sending a password reset request with an
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
CVE-2026-54718
### Impact The advanced workflow email template field is vulnerable to a specially crafted payload that can be used to r
cakephp/queue's Incomplete Comparison in getUniqueId vulnerable to collisions
CVE-2026-54713
### Impact For jobs with `shouldBeUnique = true` the queue plugin will generate a 'unique identifier' based on the job
silverstripe/userforms vulnerable to remote code execution via userforms email subject
CVE-2026-54721
### Impact The userform email subject field in the CMS is vulnerable to a specially crafted payload being used to run ar
Silverstripe Framework: Possible XSS attack through media embed
CVE-2026-54720
### Impact The "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. ##
OpenSTAManager has HTML Injection in modules/utenti/edit.php
CVE-2026-44701
### Summary An HTML Injection vulnerability exists in the user group creation functionality that allows an attacker to i