Gitea: OAuth2 access token scope enforcement bypass via HTTP Basic authentication

CVE-2026-28699

### Summary Gitea fails to enforce OAuth2 access token scopes when the token is submitted via HTTP Basic authentication

历史摘要 · 未重新核验 · GitHub Advisory

Gitea: Git Smart HTTP Skips Repository Token Scopes for Bearer Tokens

CVE-2026-28744

### Summary Gitea v1.26.1 enforces repository-scoped access-token permissions on repository operations. In the Git Smart

历史摘要 · 未重新核验 · GitHub Advisory

In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due...

CVE-2026-0150

In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to an integer overflow.

历史摘要 · 未重新核验 · GitHub Advisory

In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of...

CVE-2026-0137

In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use afte

历史摘要 · 未重新核验 · GitHub Advisory

Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts

CVE-2026-53622

## Summary There is a critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration selection that allows unauthe

历史摘要 · 未重新核验 · GitHub Advisory

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-48907

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

PLANET VDR-300NU ADSL Router - 未授权修改DNS

PLANET VDR-300NU ADSL Router - 未授权修改DNS

历史摘要 · 未重新核验 · 知道创宇 / Seebug

Acknowledgements

Acknowledgements

历史摘要 · 未重新核验 · Android Security Bulletin

Post-GDPR Threat Hunting on Android Phones: Dissecting OS-level Safeguards of User-unresettable Identifiers.

本文系统性地研究了Android手机中用户不可重置标识符（UUI）的保护措施，这些标识符如MAC地址等与设备永久绑定，具有隐私敏感性。自Android 10起，系统收紧了UUI访问策略，限制非系统应用访问，并推荐使用可重置的广告ID。然而，

历史摘要 · 未重新核验 · NDSS

Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass

CVE-2026-54326

# Potential XSS in HTML session exports via Markdown URL handling Pi HTML exports render session Markdown into a static

历史摘要 · 未重新核验 · GitHub Advisory

Gogs: Overwriting critical files results in a denial of service

CVE-2026-52797

**Vulnerability type:** Path Traversal **Impact:** DoS **Exploitation prerequisite:** authorized user **Description:** A

历史摘要 · 未重新核验 · GitHub Advisory

@nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-p...

CVE-2026-49993

### Summary This is an incomplete fix for [GHSA-6m52-m754-pw2g](https://github.com/nuxt/nuxt/security/advisories/GHSA-6m

历史摘要 · 未重新核验 · GitHub Advisory

LiteLLM: Authentication Bypass via Host Header Injection

CVE-2026-49468

### Impact A Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated acce

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Credential Exfiltration via Permission Bypass

CVE-2026-54307

## Impact A member-level user with editor access to a shared workflow could reference credentials they do not own via sp

历史摘要 · 未重新核验 · GitHub Advisory

The device has a webserver that exposes a REST API authenticated with a token on the management...

CVE-2026-22313

The device has a webserver that exposes a REST API authenticated with a token on the management network. By exploiting a

历史摘要 · 未重新核验 · GitHub Advisory

In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type...

CVE-2026-0162

In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion. This could lead to

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.7 contains a sender policy bypass vulnerability in BlueBubbles that allows...

CVE-2026-53860

OpenClaw before 2026.5.7 contains a sender policy bypass vulnerability in BlueBubbles that allows participants to match

历史摘要 · 未重新核验 · GitHub Advisory

In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime...

CVE-2026-0133

In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due t

历史摘要 · 未重新核验 · GitHub Advisory

In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of...

CVE-2026-0127

In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of-bounds read due to memory

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.7 contains a privilege escalation vulnerability where the allowFrom...

CVE-2026-53849

OpenClaw before 2026.5.7 contains a privilege escalation vulnerability where the allowFrom feature improperly validates

历史摘要 · 未重新核验 · GitHub Advisory