Search Vulnerabilities

OpenC3 COSMOS is Vulnerable to Self-XSS Through the Command Sender

OpenC3 COSMOS allows arbitrary writes to plugins directory via path-traversed config filenames

OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence

yard: Possible arbitrary path traversal and file access via yard server

Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption

Malicious code in monolith-twirp-pullsd-authorization (RubyGems)

Malicious code in monolith-twirp-pullsd-users (RubyGems)

Malicious code in gitlab-orchestrator (RubyGems)

Uncontrolled resource consumption and loop with unreachable exit condition in facil.io and downstream iodine ruby gem

Decidim amendments can be accepted or rejected by anyone

Fat Free CRM has BOLA in DELETE /emails/:id - Any authenticated user can hit this endpoint and delete emails by ID

Decidim has a cross-site scripting (XSS) in user name

bsv-sdk ARC broadcaster treats INVALID/MALFORMED/ORPHAN responses as successful broadcasts

bsv-sdk and bsv-wallet persist unverified certifier signatures in acquire_certificate (direct and issuance paths)

Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization

Addressable has a Regular Expression Denial of Service in Addressable templates

rdiscount has an Out-of-bounds Read

Rack::Request accepts invalid Host characters, enabling host allowlist bypass

Rack has Content-Length mismatch in Rack::Files error responses

Rack::Sendfile header-based X-Accel-Mapping regex injection enables unauthorized X-Accel-Redirect