Search Vulnerabilities

Cross-Tenant Data Exfiltration in Apigee via BigQuery Confused Deputy

zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 XML Parser import xml external entity reference

Apache Camel K: Camel K Cross-Namespace Build Deputy Attack

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running...

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint...

Microsoft Partner Center Spoofing Vulnerability

Local File Inclusion in the File Upload/Download Process

OpenClaw < 2026.2.21 - Arbitrary Local File Read via Browser Navigation Guard

Local privilege escalation due to improper soft link handling

Local privilege escalation due to improper soft link handling

thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference

opencc JFlow Workflow WF_Admin_AttrFlow.java Imp_Done xml external entity reference

O2OA HTTP POST Request check xml external entity reference

Bjskzy Zhiyou ERP com.artery.richclient.RichClientService RichClientService.class initRCForm xml external entity reference

beecue FastBee SIP Message ReqAbstractHandler.java getRootElement xml external entity reference

bestfeng oa_git_free WorkflowPredefineController.java updateWriteBack xml external entity reference

Jinher OA type xml external entity reference

Bjskzy Zhiyou ERP com.artery.richclient.RichClientService openForm xml external entity reference

Jinher OA text xml external entity reference

Jinher OA XML text xml external entity reference