SillyTavern has a SSRF vulnerability in the CORS proxy middleware
CVE-2026-44652
## Resolution SillyTavern 1.18.0 added a generic server-side request filter (Private Request Whitelisting). Since we ex
今日共收录 822 条安全情报,包含 0 个 CVE,457 篇安全通告,以及 56 篇研究论文。
← 返回归档列表CVE-2026-44652
## Resolution SillyTavern 1.18.0 added a generic server-side request filter (Private Request Whitelisting). Since we ex
CVE-2026-44651
## Resolution Fixed in SillyTavern 1.18.0: a user-provided URL is no longer reflected in the HTTP response body. ## Ov
CVE-2025-65088
An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions
CVE-2026-44403
Wing FTP Server 8.1.2 contains an authenticated remote code execution vulnerability in the session serialization mechani
CVE-2026-35504
PowerSYSTEM Center email notification service is affected by a CRLF injection vulnerability when using SMTPS communicati
CVE-2026-44865
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc
CVE-2026-44866
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc
CVE-2026-8052
HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as
CVE-2026-44853
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc
CVE-2026-44858
Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through t
CVE-2026-44859
Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through t
CVE-2026-44872
A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Su
CVE-2026-44856
Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through t
CVE-2026-7474
HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to code execution on the client host through a path t
CVE-2026-44873
A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their a
CVE-2026-44862
SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 com
CVE-2026-44857
Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through t
CVE-2026-44855
Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through t
CVE-2026-44867
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc
CVE-2026-44869
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc