fg0x0

vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js

Concrete CMS 9.0.0 through 9.5.2 is vulnerable to Insecure direct object reference (IDOR) in the Express saved search preset delete and edit dialogs allowing an authenticated user with permission on one Express entity to delete or rename saved search pre

fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets

Kimai before 2.56.0 Information Disclosure via config() Twig Function

CodeWhale before 0.8.64 Path Traversal via image_analyze symlink

CodeWhale before 0.8.64 Environment Variable Leak via js_execution

Scriban before 7.2.0 Denial of Service via array.insert_at

axios 0.31.1 before 0.33.0 and 1.15.1 before 1.18.0 Denial of Service via maxDepth bypass

DOMPurify through 3.3.3 Cross-Site Scripting via IN_PLACE mode

AVideo - Unauthenticated PGP Message Decryption via decryptMessage.json.php Endpoint