Buffa: Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref
CVE-2026-55406
Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.7.0, a sound
2026-07-17 归档
今日共收录 1302 条安全情报，包含 372 个 CVE，507 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Kopia: Unauthenticated RCE via SSH ProxyCommand Injection when --insecure --without-password is used
CVE-2026-45695
Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast incremental backups, client-side end-to-en
Microsoft UFO: COMMAND_RESULTS handler creates unowned sessions, allowing authenticated session-squatting denial of service
CVE-2026-55440
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.7, the COMMAND
Microsoft UFO: Missing Authorization in DEVICE_INFO_REQUEST Allows a DEVICE Client to Read Another Device's system_info
CVE-2026-54568
Microsoft UFO open-source framework for intelligent automation across devices and platforms. From 3.0.0 until 3.0.6, a c
Prompty: Arbitrary File Read via ${file:path} Reference Expansion
CVE-2026-53598
Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 2.0.0-beta.2, Prompty loaders expanded ${file:...
Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader
CVE-2026-53597
Prompty is a markdown file format (.prompty) for LLM prompts. From 2.0.0-alpha.1 until 2.0.0-beta.3, the @prompty/core T
Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref
CVE-2026-59867
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.5, Kiota resolved OpenAPI $ref values by fetching re
Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName
CVE-2026-59866
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.5, Kiota emitted x-ms-kiota-info clientClassName and
Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions
CVE-2026-59864
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.5, `kiota plugin add` and `kiota plugin generate` (w
CVE-2026-14890
CVE-2026-14890
SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that d
Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info`
CVE-2026-59865
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.5, `kiota info` read x-ms-kiota-info.languagesInform
Kiota: Workspace-config poisoning: out-of-repo file write + generation-time SSRF
CVE-2026-59863
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.5, Kiota honored a poisoned .kiota/workspace.json wo
Kiota: Code Generation Literal Injection in the PHP Generator
CVE-2026-59859
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.4, Kiota's PHP generator embedded OpenAPI descriptio
Kiota: Code Generation Literal Injection in the Python Generator
CVE-2026-59862
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.0, Kiota's Python generator let attacker-controlled
Kiota: Code Generation Literal Injection in Kiota Ruby Generator
CVE-2026-59861
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.0, Kiota's Ruby generator embedded OpenAPI default f
IDOR in Prospero Flow CRM Order API allows cross-tenant read and modification of orders
CVE-2026-59237
Authorization Bypass Through User-Controlled Key (CWE-639) in the Order and OrderItem REST API controllers in Roskus Pro
Kiota: XML Doc-Comment Newline Breakout Code Injection
CVE-2026-59860
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.3, Kiota is affected by a code-generation injection
stoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpoints
CVE-2026-63306
stoatchat before 0.13.5 contains an unauthenticated server-side request forgery vulnerability in the /proxy and /embed e
AVideo through 29.0 OS Command Injection via ffmpeg.json.php
CVE-2026-63305
AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg.json.php endpoint where notifyCode and
AVideo through 29.0 OS Command Injection via listFFmpegProcesses
CVE-2026-63304
AVideo through 29.0 contains an OS command injection vulnerability in plugin/API/standAlone/functions.php where the list