Insufficient Session Expiration vulnerability in Apache Camel Keycloak Component. The camel-keycloak security helper KeycloakSecurityHelper.parseAndVerifyAccessToken builds a K...

CVE-2026-46455

Insufficient Session Expiration vulnerability in Apache Camel Keycloak Component. The camel-keycloak security helper Ke

历史摘要 · 未重新核验 · NVD

Improper Input Validation vulnerability in Apache Camel Cometd Component. The camel-cometd component maps inbound Bayeux (CometD) message headers into the Camel Exchange withou...

CVE-2026-46454

Improper Input Validation vulnerability in Apache Camel Cometd Component. The camel-cometd component maps inbound Bayeu

历史摘要 · 未重新核验 · NVD

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Camel Docling component. The camel-docling component invokes the exte...

CVE-2026-40047

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Camel Docling

历史摘要 · 未重新核验 · NVD

mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node)

CVE-2026-35361

uutils calls `mknod` *before* setting the SELinux context (GNU uses `setfscreatecon` first, labeling atomically). If `se

历史摘要 · 未重新核验 · GitHub Advisory

mkfifo: permissions of an existing file are changed after FIFO creation fails

CVE-2026-35341

When `mkfifo()` fails (e.g. target already exists), the code shows an error but is missing a `continue;`, so it falls th

历史摘要 · 未重新核验 · GitHub Advisory

CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

CVE-2026-53935

### Impact Users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMat

历史摘要 · 未重新核验 · GitHub Advisory

mv: symlinks expanded during cross-device move (resource exhaustion / data duplication)

CVE-2026-35365

When moving directories across filesystems, uutils `mv` dereferences symlinks inside the tree, copying their targets as

历史摘要 · 未重新核验 · GitHub Advisory

rm: 'rm -rf ./' (and ./// variants) silently deletes current directory contents, bypassing dot protection

CVE-2026-35363

`rm -rf .` is correctly refused, but `clean_trailing_slashes` normalizes `.///` to `./` while `path_is_current_or_parent

历史摘要 · 未重新核验 · GitHub Advisory

rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)

CVE-2026-35349

The `--preserve-root` check uses a path-string test (`path.has_root() && path.parent().is_none()`) rather than comparing

历史摘要 · 未重新核验 · GitHub Advisory

kill: 'kill -1' parsed as PID -1, sending SIGTERM to all processes (system crash / DoS)

CVE-2026-35369

`kill -1` is incorrectly parsed as a positional `pid = -1`; combined with the default SIGTERM this calls `kill(-1, SIGTE

历史摘要 · 未重新核验 · GitHub Advisory

install -D: symlink race in directory creation allows arbitrary file overwrite

CVE-2026-35356

The `-D` path runs `fs::create_dir_all` on a pathname then later opens the destination via path-based `File::create`/`fs

历史摘要 · 未重新核验 · GitHub Advisory

install: TOCTOU symlink race (unlink-then-create without O_EXCL) allows arbitrary file overwrite

CVE-2026-35355

`copy_file` in `install/src/install.rs` removes the destination then recreates it by pathname via `File::create` / `fs::

历史摘要 · 未重新核验 · GitHub Advisory

chmod: recursive mode returns exit code 0 even when some files fail (last-file-wins)

CVE-2026-35339

In `Chmoder::chmod()` the recursive branch overwrites the running result instead of accumulating it, so the exit code re

历史摘要 · 未重新核验 · GitHub Advisory

PLANET VDR-300NU ADSL Router - 未授权修改DNS

PLANET VDR-300NU ADSL Router - 未授权修改DNS

历史摘要 · 未重新核验 · 知道创宇 / Seebug

Acknowledgements

Acknowledgements

历史摘要 · 未重新核验 · Android Security Bulletin

SYSYPHUZZ: the Pressure of More Coverage.

内核模糊测试是发现内核漏洞的有效手段，但现有工具如Syzkaller过度追求代码覆盖率，导致低频代码区域测试不足。本文提出SYSYPHUZZ，一种面向代码频率的内核模糊器，旨在提升对未充分测试代码区域的探索。首先，通过对Linux内核中Sy

历史摘要 · 未重新核验 · NDSS

ajenti through v2.2.13 has a clickjacking weakness in the browser-facing login and administrative...

CVE-2026-38979

ajenti through v2.2.13 has a clickjacking weakness in the browser-facing login and administrative UI. In ajenti-core/aj/

历史摘要 · 未重新核验 · GitHub Advisory

A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript...

CVE-2026-13356

A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the brows

历史摘要 · 未重新核验 · GitHub Advisory

Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)

CVE-2026-55630

## Summary In Kiwi TCMS the fields `TestCase.extra_link` and `TestPlan.extra_link` were meant to represent URLs to exte

历史摘要 · 未重新核验 · GitHub Advisory

Craft CMS: Stored XSS via Structure entry title in table view

CVE-2026-55793

# Stored XSS via Structure entry title in table view ## Summary An Author-level control panel user can store a JavaScr

历史摘要 · 未重新核验 · GitHub Advisory