Piwigo RCE via PHP Code Injection into Config File in Installer
CVE-2026-35048
The Piwigo installer in versions 16.3.0 and earlier accepts POST parameters for database configuration and writes them d
2026-07-21 归档
今日共收录 1301 条安全情报，包含 465 个 CVE，462 篇安全通告，以及 91 篇研究论文。
← 返回归档列表EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data
CVE-2026-58413
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.restore(env, b
Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile
CVE-2026-35591
libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before an
Network-AI has an an OS Command Injection issue
CVE-2026-54051
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.9.1, the agent sandbox gates shell comma
Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata
CVE-2026-35590
libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and in
Possible integer overflow on 32-bit systems when reading GIF images
CVE-2026-33328
libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.1
Possible integer overflow leading to potential heap-based buffer overflow
CVE-2026-33327
libvips is a fast image processing library with low memory needs. The `vipsload` operation in versions before and includ
Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory
CVE-2026-46671
Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciou
HeyForm has unauthenticated /api/upload endpoint that accepts arbitrary files with no auth/session/form context
CVE-2026-63429
HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `POST /api/upload` has no authentication guard, no
HeyForm: completeSubmission persists submitter-supplied hidden fields verbatim without validating against the form's declared hidden-field set
CVE-2026-63428
HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `completeSubmission` accepts a `hiddenFields: [{id,
HeyForm vulnerable to stored XSS via form field titles
CVE-2026-35198
HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, a stored cross-site scripting (XSS) vulnerability i
HeyForm Vulnerable to Stored XSS via Unauthenticated SVG File Upload
CVE-2026-45797
HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, the `/api/upload` endpoint allows unauthenticated f
lettre has TLS hostname verification disabled when using Boring TLS backend
CVE-2026-46428
lettre is a a mailer library for Rust. Starting in version 0.10.1 and prior to version 0.11.22, an inverted-boolean bug
Wazuh cluster DAPI arbitrary callable deserialization and RBAC context injection allow a cluster peer to execute privileged functions on the master node
CVE-2026-28220
Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, i
Mailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of GHSA-fpxj-m5q8-fphw)
CVE-2026-48824
Mailpit is an email testing tool and API for developers. Prior to version 1.30.1, the fix for GHSA-fpxj-m5q8-fphw (CVE-2
Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes
CVE-2026-45713
Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the Mailpit SMTP server has a Server.M
Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write)
CVE-2026-45712
Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the screenshot/print proxy (/proxy?dat
Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero
CVE-2026-26199
HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If `H5Iget_name`
Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c
CVE-2026-26197
HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If a file is cor
Mailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs
CVE-2026-45711
Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the mailpit dump --http sub-command