manus-use

Craft CMS 5.0.0 before 5.11.0 RCE via Twig Sandbox Behavior Injection

phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via Group Permissions API

phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via updateUserRights

phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Account Enumeration via Guest Comment Endpoint

phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Authorization via deleteGroup API

phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta TOTP 2FA Bypass via SSO Callbacks

GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec

Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providers

Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field

FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine