Recent Items
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into ~/.local/state/omarchy/current/theme may include executable content from an untrusted Git repository.
Published on 2026-10-11T15:50:50.780000+00:00
Updated on 2026-10-11T15:50:50.780000+00:00
Channel tokens and organization API key exposed in API responses
Published on 2026-10-11T15:23:15.196000+00:00
Updated on 2026-10-11T15:23:15.196000+00:00
pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header
Published on 2026-10-11T14:58:06.784000+00:00
Updated on 2026-10-11T14:58:06.784000+00:00
pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController
Published on 2026-10-11T14:58:06.113000+00:00
Updated on 2026-10-11T14:58:06.113000+00:00
pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID
Published on 2026-10-11T14:58:05.502000+00:00
Updated on 2026-10-11T14:58:05.502000+00:00
pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link
Published on 2026-10-11T14:58:04.894000+00:00
Updated on 2026-10-11T14:58:04.894000+00:00
erzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData sql injection
Published on 2026-10-11T14:45:14.792000+00:00
Updated on 2026-10-11T14:45:14.792000+00:00
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUserId
Published on 2026-10-11T14:33:48.063000+00:00
Updated on 2026-10-11T14:33:48.063000+00:00
JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXls
Published on 2026-10-11T14:33:47.376000+00:00
Updated on 2026-10-11T14:33:47.376000+00:00
JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls
Published on 2026-10-11T14:33:46.686000+00:00
Updated on 2026-10-11T14:33:46.686000+00:00