euriconicacio

webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid}

Rclone before 1.75.2 Path Traversal via serve webdav MKCOL

Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron

Froxlor 0.10.0 before 2.3.15 Missing Authorization via SubDomains.delete API

Froxlor 0.10.0 before 2.3.15 Authorization Bypass via Admins.get API

Vikunja 0.22.0 before 2.7.0 Improper Access Revocation via Webhooks

Admidio 5.0.0 before 5.0.16 Authorization Bypass via pdfl Mode in lists_show.php

Admidio 5.0.11 before 5.0.16 Broken Access Control via inventory_data.php

undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent