Dgtlmoon vulnerabilities
30 CVEs and advisories name Dgtlmoon as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-95657dgtlmoon Changedetection.io Visual Selector visual-selector.js setCurrentSelectedText cross site scripting
- CVE-2026-95656dgtlmoon changedetection.io Preview Endpoint __init__.py add_watch_ui_snapshot server-side request forgery
- CVE-2026-95273dgtlmoon changedetection.io visual_selector_data flask_app.py static_content path traversal
- CVE-2026-95272dgtlmoon changedetection.io Screenshot flask_app.py static_content path traversal
- CVE-2026-95271dgtlmoon changedetection.io Authentication Hook flask_app.py check_authentication improper authentication
- CVE-2026-95270dgtlmoon changedetection.io Hash Comparison flask_app.py check_password timing discrepancy
- CVE-2026-92815changedetection.io through 0.60.6 SSRF via browser-step Goto URL
- CVE-2026-92814changedetection.io through 0.60.6 Cross-Site Scripting via watch_title
- CVE-2026-71205changedetection.io - No Rate Limiting on /login Enables Unlimited Password Brute-Force
- CVE-2026-71204changedetection.io - Omitted Checkbox in /settings Save Silently Disables API Key Enforcement
- CVE-2026-71203changedetection.io - Missing Authentication on /api/v1/full-spec Discloses Full OpenAPI Schema
- CVE-2026-43891changedetection.io: Arbitrary Local File Read via crafted backup restore
- CVE-2026-41895changedetection.io: XXE vulnerability in the changedetection.io project
- CVE-2026-35490changedetection.io has an Authentication Bypass via Decorator Ordering
- CVE-2026-35000ChangeDetection.io < 0.54.7 SafeXPath3Parser Bypass Arbitrary File Read
- CVE-2026-33981Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters
- CVE-2026-29065changedetection.io: Zip Slip vulnerability in the backup restore functionality
- CVE-2026-29039changedetection.io: XPath - Arbitrary File Read via unparsed-text()
- CVE-2026-29038changedetection.io: Reflected XSS in RSS Tag Error Response
- CVE-2026-27696changedetection.io Vulnerable to Server-Side Request Forgery (SSRF) via Watch URLs
- CVE-2026-27645changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response
- CVE-2026-25527changedetection.io vulnerable to unauthenticated static path traversal
- CVE-2025-62780changedetection.io vulnerable to stored XSS in Watch update via API
- CVE-2025-52558ChangeDetection.io XSS in watch overview
- CVE-2024-56509changedetection.io has Improper Input Validation Leading to LFR/Path Traversal
- CVE-2024-51998Path traversal using file URI scheme without supplying hostname in changedetection.io
- CVE-2024-51483changedetection.io Path Traversal vulnerability
- CVE-2024-34061Reflected cross site scripting in changedetection.io
- CVE-2024-32651Server Side Template Injection in Jinja2 allows Remote Command Execution
- CVE-2024-23329changedetection.io API endpoint is not secured with API token