LightFTP 2.3.1 Race Condition DoS via worker_thread_cleanup
CVE-2026-67607
LightFTP 2.3.1 contains a race condition vulnerability that allows remote attackers to crash the server by racing a fres
2026-08-01 归档
今日共收录 1220 条安全情报，包含 330 个 CVE，503 篇安全通告，以及 110 篇研究论文。
← 返回归档列表Serendipity < 2.6.1 Open Redirect via exit.php
CVE-2026-67350
Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to re
ComfyUI: Path traversal in LoadImage via the /prompt API allows arbitrary file existence probing and image exfiltration
CVE-2026-56673
ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folder_path
ComfyUI: Path traversal in /experiment/models/preview allows arbitrary image file read
CVE-2026-56671
ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, get_model_previ
ComfyUI: Stored XSS via SVG file upload on the /view endpoint
CVE-2026-56670
ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, the /view endpo
CodeIgniter: Uploaded file extension validation bypass in is_image and mime_in rules
CVE-2026-63223
CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, the is_image and mime_in upload validation rules do not i
CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames
CVE-2026-63222
CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, calling UploadedFile::move() without a second argument us
CodeIgniter: SQL injection is possible via Query Builder deleteBatch() when used with where() conditions
CVE-2026-63221
CodeIgniter is a PHP full-stack web framework. From 4.3.0 through 4.7.3, Query Builder deleteBatch() substitutes bound v
CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure()
CVE-2026-63220
CodeIgniter is a PHP full-stack web framework. In versions prior to 4.7.4, IncomingRequest::isSecure() trusted the X-For
Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: remote code execution via apt argument injection
CVE-2026-18157
A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit
Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider
CVE-2026-14541
An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mc
Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP Toolbox
CVE-2026-14540
A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-t
Denial of Service via Unrestricted Payload Buffering in MCP Toolbox
CVE-2026-14539
An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox versions up
BigQuery Dataset Allowlist Bypass via Metadata Dry-Run in MCP Toolbox
CVE-2026-14538
An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component of Googl
Authorization Bypass in MCP Toolbox Legacy HTTP Endpoints
CVE-2026-14537
Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0
MZ Automation lib60870 Out-of-bounds Read
CVE-2026-61893
A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBu
MZ Automation lib60870 Out-of-bounds Read
CVE-2026-63033
A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationO
SFTPGo 2.7.4 Permission Bypass via Symbolic Link Creation
CVE-2026-10031
SFTPGo prior to 2.7.4 contains a permission bypass vulnerability that allows authenticated users to circumvent per-direc
o6 Automation open62541 Integer Underflow
CVE-2026-63362
An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cau
o6 Automation open62541 Integer Overflow or Wraparound
CVE-2026-65423
An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to t