e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in...
CVE-2026-95813
e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in PaginatorComponent and co
#cwe-601
共收录 381 条相关情报。
← 返回所有主题e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in PaginatorComponent and controller navigation links, allowing attackers to redirect...
CVE-2026-95813
e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in PaginatorComponent and co
A flaw has been found in WuzhiCMS up to 4.1.0. This affects an unknown function of the file ...
CVE-2026-94102
A flaw has been found in WuzhiCMS up to 4.1.0. This affects an unknown function of the file /index.php?m=member&v=Login
A flaw has been found in WuzhiCMS up to 4.1.0. This affects an unknown function of the file /index.php?m=member&v=Login of the component Login. This manipulation of the argument...
CVE-2026-94102
本条目披露的是 WuzhiCMS 4.1.0 及更早版本中存在的一个开放重定向（Open Redirect）漏洞。问题位于登录入口文件 /index.php?m=member&v=Login 所在的 Login 组件中，具体触发点为对外部可
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open...
CVE-2026-7527
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open Redirect in all version
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 7.0.02. This is due to the plugin...
CVE-2026-7527
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open Redirect in all version
Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:...
CVE-2026-93871
Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:, allowing authenticate
Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function...
CVE-2026-93869
Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function that validates redirect de
Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:, allowing authenticated users with page creation or edit permissions to store r...
CVE-2026-93871
Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:, allowing authenticate
Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function that validates redirect destinations using a regular expression lacking an end-of-s...
CVE-2026-93869
Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function that validates redirect de
Kyoo is a self-hosted media server focused on movies, series, and anime. Prior to 5.1.0, an unauthenticated attacker could initiate the OIDC login flow with an attacker-controll...
CVE-2026-77386
Kyoo is a self-hosted media server focused on movies, series, and anime. Prior to 5.1.0, an unauthenticated attacker cou
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, `Special:URIResolver` reso...
CVE-2026-77609
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's
Kyoo: OIDC login token can be redirected to an attacker-controlled URL
CVE-2026-77386
Kyoo is a self-hosted media server focused on movies, series, and anime. Prior to 5.1.0, an unauthenticated attacker cou
Semantic MediaWiki has an open redirect in Special:URIResolver
CVE-2026-77609
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's
Obsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth/authorize issues an authorization code without a login, consent, or session check, and...
CVE-2026-54618
Obsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth/authorize issues an authoriza
A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credent...
CVE-2026-65388
A remote attacker who controls a container registry may be able to direct a client's token request to a host of the atta
A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the...
CVE-2026-92216
A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file
A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file renderers/web_core/src/v0_9/rendering/generic-binder.ts o...
CVE-2026-92216
A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file
Nezha: OAuth2 redirect_uri Host header injection regression when dashboard_host is empty
## Summary Nezha v2.2.3 regresses the GHSA-9rc6-8cjv-rcvx host header injection fix for deployments where the new `dash
The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced red...
CVE-2026-89307
The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject a