A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected by this...
CVE-2026-7445
A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected by this issue is some unknown
2026-04-30 归档
今日共收录 966 条安全情报，包含 229 个 CVE，399 篇安全通告，以及 34 篇研究论文。
← 返回归档列表Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-6221
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this...
CVE-2026-7443
A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function
A vulnerability was determined in UTT HiPER 1250GW up to 3.2.7-210907-180535. This vulnerability...
CVE-2026-7418
A vulnerability was determined in UTT HiPER 1250GW up to 3.2.7-210907-180535. This vulnerability affects the function st
A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is...
CVE-2026-7420
A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of th
Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path...
CVE-2026-7381
Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middle
A vulnerability was found in Algovate xhs-mcp 0.8.11. This affects the function...
CVE-2026-7417
A vulnerability was found in Algovate xhs-mcp 0.8.11. This affects the function xhs_publish_content of the file src/serv
A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects...
CVE-2026-7419
A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of
A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function...
CVE-2026-7416
A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function build_project/run_tests
A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability...
CVE-2026-7410
A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects unknown code o
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function...
CVE-2026-7409
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_user of the file /a
CKAN has Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`
CVE-2026-42031
### Impact A vulnerability in `datastore_search_sql` allowed attackers to inject SQL in order to gain access to private
Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool
CVE-2026-41686
The `BetaLocalFilesystemMemoryTool` in the Anthropic TypeScript SDK created memory files and directories using the Node.
pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber
CVE-2026-42352
### Impact OGC API - Process execution requests can use the `subscriber` object to requests to internal HTTP services.
pygeoapi 0.23.x: Path Traversal in STAC FileSystemProvider
CVE-2026-42351
### Impact A raw string path concatenation vulnerability in pygeoapi's STAC FileSystemProvider plugin can allow for requ
Marked Vulnerable to OOM Denial of Service via Infinite Recursion in marked Tokenizer
CVE-2026-41680
### Summary A critical Denial of Service (DoS) vulnerability exists in `marked@18.0.0`. By providing a specific 3-byte i
Admidio Missing Minimum Administrator Check in Role Membership Removal
CVE-2026-41662
## Summary `Role::stopMembership()` does not verify whether removing a user from the administrator role leaves zero adm
Admidio has Inverted 2FA Reset Authorization Check that Lets Group Leaders Strip Admin TOTP
CVE-2026-41660
## Summary A logic error in Admidio's two-factor authentication reset inverts the authorization check. Non-admin users
Admidio Leaks Hidden Profile Field Values via Blind Search Oracle in Member Assignment
CVE-2026-41659
## Summary The member assignment DataTables endpoint (`members_assignment_data.php`) includes hidden profile fields (BI
Admidio Exposes Cross-Organization Member Data via Permission Check Mismatch in contacts_data.php
CVE-2026-41657
## Summary The `contacts_data.php` endpoint uses a weaker permission check (`isAdministratorUsers()`, requiring only `r