On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the

@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is not configured as a helper/destinat

Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

An insufficient check allowed for the overwrite of arbitrary files via a symlink.

@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with match criteria based on the information option, an unauthent

QloApps through 1.7.0 Reflected XSS via Hotel Feature Validation Errors

adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Size

Cotonti 1.0.0 Comments Plugin PHP Object Injection via ci Parameter