Grav Vulnerable to Privilege Escalation via Missing Server-Side Validation of groups/access
CVE-2026-42613
# Bug Report: Registration Privilege Escalation via Missing Server-Side Validation of groups/access ## Summary The `Lo
2026-05-06 归档
今日共收录 1285 条安全情报，包含 277 个 CVE，391 篇安全通告，以及 322 篇研究论文。
← 返回归档列表Grav Vulnerable to XSS via Taxonomy Field Values in Admin Panel
CVE-2026-42842
### Summary A Stored Cross-Site Scripting (XSS) vulnerability exists in the Grav CMS Form plugin's select field templat
Grav Vulnerable to Remote Code Execution (RCE) via Malicious Plugin ZIP Upload in Direct Install Feature
CVE-2026-42607
### Summary An authenticated user with administrative privileges can achieve Remote Code Execution (RCE) by uploading a
PocketBase vulnerable to account pre-hijacking via OAuth2 unverfied->verified autolinking upgrade
CVE-2026-44166
A pre-hijacking issue was discovered with the OAuth2 autolinking by [Alardiians](https://github.com/Alardiians). In som
Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection
CVE-2026-42303
### Summary Fides deployments that enable both subject identity verification and duplicate privacy request detection ar
DevGuard has an unauthenticated identity assertion via `X-Admin-Token` header
CVE-2026-42300
### Impact The `SessionMiddleware` accepts a client-supplied `X-Admin-Token` HTTP request header and uses its raw string
MagicMirror vulnerable to unauthenticated SSRF via /cors endpoint
CVE-2026-42281
### Summary An unauthenticated Server-Side Request Forgery (SSRF) vulnerability in the `/cors` endpoint allows any remo
open-websearch has SSRF in `fetchWebContent` MCP tool: bracketed IPv6 literals and non-resolving hostname check bypass `isPrivateOrLocalHostname`
CVE-2026-42260
### Summary `src/utils/urlSafety.ts` exposes `isPublicHttpUrl` / `assertPublicHttpUrl`, used to gate the MCP `fetchWebCo
YAFNET has Stored XSS in Forum Thread Posts/Replies that Allows Arbitrary JavaScript Execution for All Thread Viewers
CVE-2026-43939
**Description:** Stored Cross-Site Scripting (XSS) occurs when user-supplied input is persisted by the application and l
YAFNET: Pre-Handler Authorization Bypass on Admin Pages Enables Blind SQL Execution via `/Admin/RunSql`
CVE-2026-43937
**Issue Details:** YAFNET's only admin authorization gate is `PageSecurityCheckAttribute`, implemented as a `ResultFilte
YAFNET has Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected `User-Agent` Header
CVE-2026-43938
**Description:** Stored (second-order) Cross-Site Scripting (XSS) occurs when attacker-controlled input is persisted thr
Fiber vulnerable to XSS in AutoFormat Content Negotiation
CVE-2026-42554
## Summary **Description** A Cross-Site Scripting (CWE-79) vulnerability in Go Fiber allows a remote attacker to injec
Magento LTS Vulnerable to Open Redirect via Unvalidated `uenc` Parameter in `stockAction()`
CVE-2026-42207
## Summary `Mage_ProductAlert_AddController::stockAction()` reads the uenc query parameter and passes it directly to `$t
MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint
CVE-2026-42600
### Impact _What kind of vulnerability is it? Who is impacted?_ A path traversal vulnerability in MinIO's `ReadMultipl
Admidio has an incomplete fix for CVE-2026-32812 (SSRF)
CVE-2026-42194
### Summary The incomplete SSRF fix in Admidio's `fetch_metadata.php` validates the resolved IP address but passes the
Prometheus Azure AD remote write OAuth client secret exposed via config API
CVE-2026-42151
### Impact Users who use Azure AD remote write with OAuth authentication are impacted. The `client_secret` field in th
Firewall for AI
Firewall for AI
Cleartext Passwords in MS Edge? In 2026?, (Mon, May 4th)
Yup, that is for real.
Revisiting JBShield: Breaking and Rebuilding Representation-Level Jailbreak Defenses
本文针对大型语言模型（LLM）的越狱攻击防御展开研究，重点重访了近期提出的JBShield防御机制。JBShield通过检测两种概念信号（毒性概念和越狱概念）来识别恶意提示，在部分设置下声称攻击成功率为0%。然而，本文设计了一种新的自适应攻
KVerus: Scalable and Resilient Formal Verification Proof Generation for Rust Code
形式化验证是确保软件正确性和安全性的最高保证，但将其应用于大规模、不断演变的系统仍面临重大挑战。尽管大语言模型（LLM）在自动证明生成方面展现出潜力，但由于无法处理复杂的跨模块依赖关系或代码库及验证工具链的变化，它们在实际应用中常常失败。本