Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field
CVE-2026-66748
Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulnerability that allows user
2026-07-29 归档
今日共收录 1422 条安全情报，包含 510 个 CVE，504 篇安全通告，以及 114 篇研究论文。
← 返回归档列表@wakaru/cli arbitrary file write during bundle unpack
CVE-2026-54545
wakaru is a JavaScript decompiler and unminifier toolkit. From 1.0.0 until 1.4.0, @wakaru/cli sanitizes bundle-controlle
Open Redirect in MISP Installer-Generated Apache Configuration
CVE-2026-67178
MISP installation scripts generated an Apache HTTP virtual-host configuration containing an incorrectly formatted HTTP-t
Apache Axis2/Java: deserialization of untrusted Data
CVE-2026-66713
Deserialization of Untrusted Data (CWE-502) in the Tribes-based clustering component in Apache Software Foundation Ap
Stored DOM-Based Cross-Site Scripting in Node Modal Headers
CVE-2026-66919
Pivotick contains a cross-site scripting vulnerability in the inspect and edit node modals. Node labels and descriptions
nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure
CVE-2026-18038
A flaw has been found in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the function ExecTool.E
DOM-Based Cross-Site Scripting via Unsanitized SVG Node Icons
CVE-2026-66918
Pivotick fails to sanitize attacker-controlled SVG markup supplied through the per-node style.svgIcon property before in
Zip Bomb in Lookyloo Capture Upload Allows Denial of Service
CVE-2026-66913
Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An atta
ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash)
CVE-2024-14041
In Bouncy Castle for Java from 1.73 to before 1.78, three ML-KEM (CRYSTALS-Kyber) routines divided secret-derived polyno
CVE-2026-17524
CVE-2026-17524
Versions of the package zip-lib before 1.1.0 are vulnerable to Directory Traversal via the caching mechanism for path va
IDOR in Prospero Flow CRM allows deletion of other users' notifications
CVE-2026-59240
The vulnerability involves an Insecure Direct Object Reference (IDOR) in the `DeleteNotificationController::delete()` me
@astrojs/rss: XML Injection via Unescaped RSS Feed Fields
CVE-2026-59728
Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.t
Astro: Cross-site scripting via unescaped transition:* directive values on hydrated islands
CVE-2026-59727
Astro is a web framework for content-driven websites. In versions 3.10.0 through 7.0.3, when a transition:persist, trans
Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)
CVE-2026-59729
Astro is a web framework for content-driven websites. Versions prior to 7.0.6 are vulnerable to XSS through unescaped sp
Next.js: Response Body Cache Confusion for Requests Containing Bodies
CVE-2026-64648
Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 thr
Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies
CVE-2026-64647
Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 thr
Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in call
CVE-2026-17552
Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concaten
Papra: SSRF via HTTP redirect bypass in webhook delivery
CVE-2026-48051
Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, Papra's webhook delivery sy
Next.js: Denial of Service in the Image Optimization API using SVGs
CVE-2026-64644
Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 thr
Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection
CVE-2026-55578
Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, the termin