Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

6 advisories

Loading
AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE Moderate
CVE-2026-96634 was published for adminneo-org/adminneo (Composer) Oct 30, 2026
zdi-disclosures Credited to zdi-disclosures and vrana vrana vrana
AdminNeo SQLite Database-List Drop Arbitrary File Deletion High
CVE-2026-96633 was published for adminneo-org/adminneo (Composer) Oct 30, 2026
slpoiuewalspoid-dotcom Credited to slpoiuewalspoid-dotcom and vrana vrana vrana
AdminNeo has Cookie Attribute Injection via Unsanitized X-Forwarded-Prefix in Set-Cookie Headers High
CVE-2026-96631 was published for adminneo-org/adminneo (Composer) Oct 30, 2026
retkoussa Credited to retkoussa and vrana vrana vrana
AdminNeo: RCE via SQLite VACUUM INTO (ATTACH Blocklist Bypass) High
CVE-2026-96630 was published for adminneo-org/adminneo (Composer) Oct 30, 2026
vrana Credited to vrana
AdminNeo: CSRF Token Secret Recoverable from Single Observed Token, Enabling Cross-Site Request Forgery Moderate
CVE-2026-96629 was published for adminneo-org/adminneo (Composer) Oct 30, 2026
az0mb13 Credited to az0mb13 and vrana vrana vrana
AdminNeo: version-cache array injection causes persistent denial of service High
CVE-2026-59978 was published for adminneo-org/adminneo (Composer) Oct 30, 2026
JoyGhoshs Credited to JoyGhoshs and vrana vrana vrana
ProTip! Advisories are also available from the GraphQL API