Search Vulnerabilities

phpMyFAQ has Stored XSS in user list via admin-managed display_name

Croogo CMS has a path traversal vulnerability

Cadmium CMS has a background arbitrary file upload vulnerability

LibreNMS Alert Rule API Cross-Site Scripting Vulnerability

AWS SDK for PHP's S3 Encryption Client has a Key Commitment Issue

Auth0 WordPress has Improper Audience Validation via Auth0-PHP SDK Dependency

Auth0 Symfony SDK has Improper Audience Validation via Auth0-PHP SDK

Auth0 Laravel SDK has Improper Audience Validation via Auth0-PHP SDK dependency

Auth0-PHP SDK has Improper Audience Validation

Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component

Pagekit CMS is vulnerable to OS Command Injection via Storage component

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

Grav may be vulnerable to SSRF attack via Twig Templates

Grav is vulnerable to Stored XSS through authenticated user-edited content

MineAdmin has an insecure default password

FoF Pretty Mail has a server-side template injection vulnerability

AzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCE

Ibexa User Bundle is missing password change validation

Shopware Storefront Reflected XSS in Storefront Login Page

SAML PHP Toolkit Vulnerability on xmlseclibs CVE-2025-66475