Saidakbarxon Maxsudxonov

Statamic CMS Unguarded Exposure of 2FA Recovery Codes via Antlers current_user Variable

Subrion CMS Admin Grid SQL Injection via Unwhitelisted ORDER BY sort Parameter

Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering

NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST API

Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.pl

Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injection

peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules

Stack Buffer Overflow in rxi/microtar raw_to_header() via non-null-terminated TAR name field

Integer Overflow in rxi/microtar mtar_next() Causes Infinite Loop DoS

MQTT-C Heap Out-of-Bounds Read and Integer Underflow in mqtt_unpack_publish_response()