stoatchat 20241213-1 Webhook Token Disclosure via Read Permissions
CVE-2025-71388
stoatchat (delta/Revolt) versions from 20241213-1 before 20250210-1 allow users with only ViewChannel (read) permission
2026-07-17 归档
今日共收录 1302 条安全情报，包含 372 个 CVE，507 篇安全通告，以及 120 篇研究论文。
← 返回归档列表stoatchat before 20250210-1 Unrestricted Message History Fetch
CVE-2025-71377
stoatchat (delta) versions before 20250210-1 (0.8.2) contain a logic error in the query messages route. When fetching me
ipv4: account for fraggap on the paged allocation path
CVE-2026-53366
In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation p
Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
CVE-2026-48863
A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to
Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write
CVE-2026-3842
A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond
AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket Plugin
CVE-2026-54458
WWBN AVideo is an open source video platform. Versions prior to 29.0 contain a stored DOM Cross-Site Scripting vulnerabi
Incomplete fix for CVE-2026-25754 in @adonisjs/bodyparser
CVE-2026-48795
AdonisJS is a TypeScript-first web framework. From 10.1.3 until 10.1.5 and 11.0.3, AdonisJS @adonisjs/bodyparser incompl
Sandboxie-Plus: Sandboxie APC Injection Sandbox Escape
CVE-2026-45313
Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.17.6, GuiServer::WndHookRegist
Qinglong: Incomplete fix for CVE-2026-3965: Improper Authentication
CVE-2026-55445
Qinglong is a timed task management platform supporting Python3, JavaScript, Shell, and Typescript. Prior to 2.20.1, the
Wekan: Header-login IP allowlist bypass via X-Forwarded-For spoofing in Wekan allows unauthenticated full account takeover (incl. admin)
CVE-2026-55652
Wekan is open source kanban built with Meteor. Prior to 9.46, header-login with HEADER_LOGIN_TRUSTED_IPS uses getRequest
Wekan: Broken access control: any authenticated user can move their Cards/Lists/Swimlanes into a private board they are not a member of (cross-board write via collection allow r...
CVE-2026-55234
Wekan is open source kanban built with Meteor. Prior to 9.37, Wekan DDP update allow rules in server/permissions/cards.j
Wekan: `cloneBoard` Meteor method has no authorization check — any user can clone (read) any private board by ID
CVE-2026-53447
Wekan is open source kanban built with Meteor. Prior to 9.35, the Wekan cloneBoard Meteor method in models/import.js use
Wekan: OIDC Account Takeover via Unconditional Email-Based Account Merge in onCreateUser hook
CVE-2026-52893
Wekan is open source kanban built with Meteor. Prior to 9.32, the Wekan Accounts.onCreateUser hook in server/models/user
Wekan: Missing authorization on OIDC Meteor methods allows privilege escalation to admin
CVE-2026-53444
Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan OIDC-related Meteor methods in packages/wekan-oidc/o
Wekan: Authorization bypass in copyBoard DDP method allows any user to copy private boards
CVE-2026-53445
Wekan is open source kanban built with Meteor. Prior to 9.32, the Wekan copyBoard Meteor DDP method in server/publicatio
Wekan: Server-Side Request Forgery (SSRF) via webhook integration URLs
CVE-2026-53446
Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan webhook integration URLs in models/integrations.js a
Wekan: Read-only board members can create/modify/delete Custom Fields (privilege escalation via read-level authz on write ops)
CVE-2026-52892
Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan REST handlers in server/models/customFields.js use r
Wekan: Shell Injection via Avatar Upload
CVE-2026-52891
Wekan is open source kanban built with Meteor. Prior to 9.07, Wekan avatar upload functionality embeds user-supplied fil
Wekan: Arbitrary file read and server DoS via attachment versions.original.path
CVE-2026-52890
Wekan is open source kanban built with Meteor. Prior to 9.31, Wekan allows a logged-in board member to insert an attachm
MaaAssistantArknights: PR-title expression injection in release-preparation.yml
CVE-2026-55576
MaaAssistantArknights is a one-click tool for daily Arknights tasks. In the current dev-v2 workflow, .github/workflows/r