Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Dokku is a docker-powered PaaS. Prior to 0.38.7, the cron plugin utilizes commands in the app.json file to manage system cron running as the Dokku user. An app.json cron command utilizing special shel...
Dokku is a docker-powered PaaS. Prior to 0.38.2, the app name validation regex (^[a-z0-9][^/:_A-Z]*$) permits shell metacharacters. When an authenticated user pushes to a git remote with a crafted app...
Dokku is a docker-powered PaaS. Prior to 0.38.2, the openresty-vhosts plugin copies files from an app's openresty/http-includes/ git repository directory to the host and then interpolates their filena...
Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:from-archive and certs:add commands extract user-supplied tar/zip archives into temporary directories without sanitizing member paths or preven...
Server side template inject (SSTI) in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code execution (RCE) via crafted template e...
The default JVM can access files and directories under `/tmp/` including the `$TemporaryDirectory` of other users on the same cloud instance (`/tmp/UserTemporaryFiles/`). The `-init` file for the the...
Administrator Arbitrary File Upload in TemplateSpare <= 4.2.0 versions....
Unauthenticated SQL Injection in Advance Product Search <= 1.4.4 versions....
Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions....
Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions....
Unauthenticated SQL Injection in Quotes llama <= 3.1.5 versions....
Subscriber Arbitrary File Upload in Travel Booking <= 2.2.5 versions....
Subscriber Arbitrary File Upload in Quform <= 2.23.0 versions....
Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions....
Unauthenticated SQL Injection in 워드프레스 결제 심플페이 <= 5.5.6 versions....
Unauthenticated SQL Injection in Library Management System <= 3.5.7 versions....
Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions....
Subscriber PHP Object Injection in Buddyboss Platform <= 3.0.4 versions....
Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions....
Unauthenticated Privilege Escalation in Easy Elements for Elementor – Addons & Website Templates <= 1.4.9 versions....
Customer Arbitrary File Upload in Booster for WooCommerce <= 8.0.1 versions....
Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions....
Unauthenticated SQL Injection in Real Estate 7 <= 3.5.9 versions....
Unauthenticated SQL Injection in wpDataTables <= 7.4 versions....