libvips matrixload.c vips_foreign_load_matrix_header null pointer dereference

libvips libvips

Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager

Hitachi Hitachi Ops Center API Configuration Manager Hitachi Hitachi Configuration Manager +4个

Talishar Vulnerable to Cross-Site Request Forgery (CSRF)

Talishar Talishar talishar talishar

InvenTree Vulnerable to Server Side Template Injection (SSTI)

inventree InvenTree inventree_project inventree

pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

py-pdf pypdf pypdf_project pypdf

OliveTin vulnerable to OS Command Injection via `password` argument type and webhook JSON extraction bypasses shell safety checks

OliveTin OliveTin olivetin olivetin

Repostat Vulnerable to Reflected Cross-Site Scripting (XSS) via repo prop in RepoCard

denpiligrim repostat denpiligrim repostat

TypiCMS Core has Stored Cross-Site Scripting (XSS) via SVG File Upload

TypiCMS Core typicms typicms

ADB-Explorer: UNC Path Support in ManualAdbPath Leads to Remote Code Execution (RCE)

Alex4SSB ADB-Explorer alex4ssb adb_explorer

Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering

bugsink bugsink bugsink bugsink

FileBrowser Quantum: Password Protection Not Enforced on Shared File Links

gtsteffaniak filebrowser gtsteffaniak filebrowser +2个

Parse Dashboard has incomplete authentication on AI Agent endpoint

parse-community parse-dashboard parseplatform parse_dashboard +12个

Parse Dashboard Has a Cache Key Collision that Leaks Master Key to Read-Only Sessions

parse-community parse-dashboard parseplatform parse_dashboard +12个

Parse Dashboard Missing CSRF Protection on Agent Endpoint

parse-community parse-dashboard parseplatform parse_dashboard +13个

Parse Dashboard Missing Authorization on Agent Endpoint

parse-community parse-dashboard parseplatform parse_dashboard +12个

Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover

rustfs rustfs rustfs rustfs

RustFS's Missing Post Policy Validation leads to Arbitrary Object Write

rustfs rustfs rustfs rustfs

Rollup 4 has Arbitrary File Write via Path Traversal

rollup rollup rollup rollup +2个

OpenEMR's location resource for Group.$export operation returns entire patient/user population contact information

openemr openemr open-emr openemr

libvips matrixload.c vips_foreign_load_matrix_header memory corruption

libvips libvips