Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking
CVE-2026-55076
### Summary Coder's OIDC callback checked `email_verified` with a direct Go `bool` type assertion. When an IdP returned
2026-07-07 归档
今日共收录 976 条安全情报，包含 239 个 CVE，384 篇安全通告，以及 83 篇研究论文。
← 返回归档列表Langroid: handle_message() executes user-supplied tool JSON without sender verification
CVE-2026-54771
## Summary A Langroid application exposing a chat interface to untrusted users may allow direct tool invocation via raw
Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls
CVE-2026-54760
# SQLChatAgent `_validate_query` dangerous-pattern regex is bypassable via quoted/commented/qualified function names ##
printenv: environment variables with invalid UTF-8 are silently skipped (evades inspection)
CVE-2026-35366
The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences.
uucore: safe_traversal TOCTOU protection only enabled on Linux
CVE-2026-35362
The safe_traversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use (TOCTOU) s
cp: -R reads device nodes as streams, destroying device semantics
CVE-2026-35358
The cp utility in uutils coreutils, when performing recursive copies (-R), incorrectly treats character and block device
comm: FIFO/pipe inputs are drained before comparison (data loss / hang)
CVE-2026-35347
The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison
id: groups= computed from real GID instead of effective GID
CVE-2026-35370
The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's rea
mkdir: -m exposes directory with umask perms before chmod (race window)
CVE-2026-35353
The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory wit
id: pretty-print uses effective GID instead of effective UID for name lookup
CVE-2026-35371
The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effect
cut: -s (only-delimited) ignored when delimiter is a newline
CVE-2026-35343
The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is speci
ln: rejects non-UTF-8 source filenames in target-directory mode
CVE-2026-35373
In target-directory forms (`ln SOURCE... DIRECTORY`), `ln` rejects source paths with non-UTF-8 filename bytes, while GNU
comm: lossy UTF-8 conversion silently corrupts non-UTF-8 output
CVE-2026-35346
The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conversion on all output lines. Th
mktemp: empty TMPDIR creates temp files in CWD instead of /tmp
CVE-2026-35342
The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp,
The Reviews Widgets for Google, Yelp & TripAdvisor plugin for WordPress is vulnerable to Stored...
CVE-2026-12154
The Reviews Widgets for Google, Yelp & TripAdvisor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support...
CVE-2026-40141
A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote
Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: before 3.0...
CVE-2026-43825
Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: before 3.0.0-M4 (libsvm document c
BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre...
CVE-2026-40140
BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示