Bagisto 0.1.5 allows CSRF under /admin URIs. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
CSRF
Bagisto
NVD
GitHub
CVSS 3.0
8.8
EPSS
0.6%
An issue was discovered in PDFResurrect before 0.18. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.
Buffer Overflow
Memory Corruption
Pdfresurrect
Fedora
Debian Linux
NVD
GitHub
CVSS 3.1
7.8
EPSS
1.1%