Hacktivity

View vulnerability disclosures that have been approved and fixed by the maintainer.

Advisory	Researcher
Prototype Pollution in liriliri/licia 3 hours ago	ready-research @ready-research legend
Inefficient Regular Expression Complexity in liriliri/licia 3 hours ago	ready-research @ready-research legend
Inefficient Regular Expression Complexity in josdejong/jsoneditor 7 hours ago	ready-research @ready-research legend
Unrestricted Upload of File with Dangerous Type in sbrl/pepperminty-wiki a day ago	hitisec @hitisec pro
Open Redirect in sbrl/pepperminty-wiki a day ago	hitisec @hitisec pro
Cross-site Scripting (XSS) - Reflected in sbrl/pepperminty-wiki a day ago	hitisec @hitisec pro
Exposure of Sensitive Information to an Unauthorized Actor in opendatacube/odc-tools a day ago	Anwar @anwarayoob pro
Inefficient Regular Expression Complexity in pksunkara/inflect 2 days ago	ready-research @ready-research legend
Insufficient Granularity of Access Control in zikula/core 2 days ago	Raptor @aravindd007 master
Cross-site Scripting (XSS) - Stored in zhongshaofa/easyadmin 2 days ago	lethanhphuc @noobpk pro
Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii 2 days ago	amammad @amammad legend
Reliance on Cookies without Validation and Integrity Checking in getgrav/grav 2 days ago	Timmy @1esvee1 n00b
Cross-site Scripting (XSS) - Stored in zikula-modules/content 2 days ago	lethanhphuc @noobpk pro
Cross-site Scripting (XSS) - Stored in zikula/core 2 days ago	lethanhphuc @noobpk pro
Open Redirect in zikula/core 2 days ago	lethanhphuc @noobpk pro
Cross-site Scripting (XSS) - Stored in zikula-modules/content 2 days ago	lethanhphuc @noobpk pro
Cross-Site Request Forgery (CSRF) in justingit/dada-mail 3 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in justingit/dada-mail 3 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in justingit/dada-mail 3 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in justingit/dada-mail 3 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in justingit/dada-mail 3 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in justingit/dada-mail 3 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in justingit/dada-mail 3 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in justingit/dada-mail 3 days ago	amammad @amammad legend
Cross-site Scripting (XSS) - Reflected in cujanovic/ssrf-testing 3 days ago	wtwver @wtwver legend
Improper Handling of Insufficient Privileges in dolibarr/dolibarr 4 days ago	ranjit-git @ranjit-git legend
Improper Privilege Management in dolibarr/dolibarr 4 days ago	ranjit-git @ranjit-git legend
Improper Handling of Insufficient Privileges in dolibarr/dolibarr 4 days ago	ranjit-git @ranjit-git legend
Cross-site Scripting (XSS) - Stored in zikula-modules/mediamodule 4 days ago	0x9x @shellinjector master
Cross-site Scripting (XSS) - Reflected in zikula/core 4 days ago	0x9x @shellinjector master
Improper Privilege Management in dolibarr/dolibarr 4 days ago	ranjit-git @ranjit-git legend
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	ranjit-git @ranjit-git legend
Use of Out-of-range Pointer Offset in bfabiszewski/libmobi 4 days ago	Cen Zhang @occia master
Out-of-bounds Read in bfabiszewski/libmobi 4 days ago	Cen Zhang @occia master
Use of Out-of-range Pointer Offset in bfabiszewski/libmobi 4 days ago	Cen Zhang @occia master
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	ranjit-git @ranjit-git legend
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	ranjit-git @ranjit-git legend
Cross-site Scripting (XSS) - Reflected in zikula/core 4 days ago	0x9x @shellinjector master
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	ranjit-git @ranjit-git legend
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	ranjit-git @ranjit-git legend
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	ranjit-git @ranjit-git legend
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	ranjit-git @ranjit-git legend
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	ranjit-git @ranjit-git legend
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	ranjit-git @ranjit-git legend
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr 4 days ago	ranjit-git @ranjit-git legend
Session Fixation in alovoa/alovoa 5 days ago	Raptor @aravindd007 master
Cross-site Scripting (XSS) - DOM in zoujingli/thinkadmin 5 days ago	ranjit-git @ranjit-git legend
Cross-site Scripting (XSS) - Stored in zoujingli/thinkadmin 5 days ago	lethanhphuc @noobpk pro
Exposure of Sensitive Information Due to Incompatible Policies in zoujingli/thinkadmin 6 days ago	0x9x @shellinjector master
Inefficient Regular Expression Complexity in cdr/code-server 6 days ago	ready-research @ready-research legend
Cross-site Scripting (XSS) - Reflected in area17/twill 6 days ago	Melbin Mathew Antony @melbinkm legend
Inefficient Regular Expression Complexity in chalk/ansi-regex 6 days ago	Yeting Li @yetingli master
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in tildeclub/site 6 days ago	Viky @vikychoi pro
Insufficient Isolation of System-Dependent Functions in fisharebest/webtrees 6 days ago	PHoward @ph0ward pro
Prototype Pollution in mariocasciaro/object-path 6 days ago	ready-research @ready-research legend
Inefficient Regular Expression Complexity in nervjs/taro 6 days ago	ready-research @ready-research legend
Cross-site Scripting (XSS) - Stored in fisharebest/webtrees 7 days ago	PHoward @ph0ward pro
Sensitive Cookie Without 'HttpOnly' Flag in babybuddy/babybuddy 7 days ago	@0xAmal @0xamal pro
The UI Performs the Wrong Action in babybuddy/babybuddy 7 days ago	@0xAmal @0xamal pro
Weak Password Recovery Mechanism for Forgotten Password in babybuddy/babybuddy 7 days ago	@0xAmal @0xamal pro
Code Injection in jerrod-lankford/google-voice-desktop-app 7 days ago	haxatron @haxatron pro
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in babybuddy/babybuddy 7 days ago	0xdhinu @z3rr0-err0r pro
Inefficient Regular Expression Complexity in fb55/nth-check 7 days ago	Yeting Li @yetingli master
External Control of File Name or Path in zoujingli/thinkadmin 7 days ago	ranjit-git @ranjit-git legend
Code Injection in zoujingli/thinkadmin 7 days ago	ranjit-git @ranjit-git legend
Cross-site Scripting (XSS) - Stored in zoujingli/thinkadmin 7 days ago	ranjit-git @ranjit-git legend
Cross-Site Request Forgery (CSRF) in zhongshaofa/easyadmin 8 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in zhongshaofa/easyadmin 8 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in zhongshaofa/easyadmin 8 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in zhongshaofa/easyadmin 8 days ago	amammad @amammad legend
Cross-Site Request Forgery (CSRF) in zhongshaofa/easyadmin 8 days ago	amammad @amammad legend