Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete...
CVE-2026-8415
Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/express/as
2026-05-22 归档
今日共收录 1105 条安全情报，包含 281 个 CVE，422 篇安全通告，以及 120 篇研究论文。
← 返回归档列表The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing...
CVE-2026-6960
The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in
Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret
CVE-2026-46701
# Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret | Field | Value | | ------------
Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host
CVE-2026-46703
#### Summary Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and run OCI
Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)
CVE-2026-46678
## Summary When an application using Pydantic AI opts a URL into `force_download='allow-local'` (which disables the def
SQLAdmin: Authorization Bypass on `ajax_lookup`
CVE-2026-46645
### Impact The `ajax_lookup` endpoint in `application.py` bypasses the `is_accessible()` access control check that all
Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token-...
CVE-2026-8428
Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token->output('do_update')) but
Concrete CMS 9.5.0 and below has Stored XSS on the height parameter. The controller does not...
CVE-2026-8203
Concrete CMS 9.5.0 and below has Stored XSS on the height parameter. The controller does not validate or sanitize $heigh
Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to ...
CVE-2026-8426
Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/prepa
IINA before 1.4.3 contains a user-assisted command execution vulnerability that allows remote...
CVE-2026-47114
IINA before 1.4.3 contains a user-assisted command execution vulnerability that allows remote attackers to execute arbit
Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects)
CVE-2026-46635
### Description The `column` filter passes its input straight to PHP's native `array_column()`. When the array elements
FlaskBB: SSRF in get_image_info() via unrestricted avatar URL
CVE-2026-46556
###Summary A Server-Side Request Forgery (SSRF) vulnerability in get_image_info() allows any authenticated user to force
NocoDB: Attachment Size Limit Bypass via Upload-by-URL
CVE-2026-46553
### Summary The upload-by-URL path did not enforce `NC_ATTACHMENT_FIELD_SIZE` against either the remote file's advertise
NocoDB: Refresh Token Cookie Set Without `secure` and `sameSite` Flags
CVE-2026-46550
### Summary The refresh-token cookie was set with `httpOnly: true` but missing both the `secure` flag and the `sameSite
NocoDB: SSRF Protection Bypass in Notification Webhook Plugins (Slack, Discord, Mattermost, Teams)
CVE-2026-46548
### Summary The `request-filtering-agent` SSRF protection was non-functional in the four notification webhook plugins (
MCP Server Kubernetes: Tool Access Control Bypass via Presentation-Layer Filtering Without Execution-Layer Enforcement
CVE-2026-46519
## Summary `mcp-server-kubernetes` exposes three environment variables (`ALLOW_ONLY_READONLY_TOOLS`, `ALLOW_ONLY_NON_DE
Firewall for AI
Firewall for AI
ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories
This week starts small. A token leaks. A bad package slips in. A login trick works. An old tool shows up again. At firs
Socket Raises $60 Million at $1 Billion Valuation
The company will invest in its firewall, certified patches, protection extensions, new products, and team expansion. The
An Application-Layer Multi-Modal Covert-Channel Reference Monitor for LLM Agent Egress
本文提出了一种针对大型语言模型（LLM）代理出站流量的应用层多模态隐信道参考监视器。当前，即使目标地址白名单和内容扫描器也无法检测看似合法的载荷中是否嵌入隐信道：被攻陷的代理可以在零宽字符、同形异义字、空白、Base64、JSON键顺序、消