Ghost: Archived Offers can be Redeemed
CVE-2026-70589
### Impact A missing validation check allowed users to redeem subscription offers that were no longer active. ### Vuln
2026-08-05 归档
今日共收录 766 条安全情报，包含 0 个 CVE，370 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Ghost: File Upload Content-Type Spoofing
CVE-2026-53948
### Impact Insufficient validation of the client-supplied `Content-Type` on Ghost's Admin API file upload endpoint allo
Ghost: Cross-Site Scripting in Universal Import
CVE-2026-70588
### Impact The Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in
Open WebUI: Users denied the image-generation permission can still generate images via chat completions
CVE-2026-70484
## Summary An authenticated user whose `features.image_generation` permission has been revoked can still make the server
Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
CVE-2026-70478
### Summary The OAuth2 token refresh endpoint (`POST /api/v1/oauth2-credential/refresh/:credentialId`) is in `WHITELIST
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
CVE-2026-70477
-- ABSTRACT ------------------------------------- Trend Micro's Zero Day Initiative has identified a vulnerability affe
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of...
CVE-2026-47623
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A succ
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition...
CVE-2026-47621
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager sing
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition...
CVE-2026-47620
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager sing
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of...
CVE-2026-47622
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that con
A weakness has been identified in Systerel S2OPC up to 1.7.3. This affects the function...
CVE-2026-18790
A weakness has been identified in Systerel S2OPC up to 1.7.3. This affects the function LockedStaMac_ProcessMsg_DeleteMo
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an...
CVE-2026-24255
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an...
CVE-2026-47617
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side
A vulnerability allowing local privilege escalation to the Reporter service context.
CVE-2026-64634
A vulnerability allowing local privilege escalation to the Reporter service context.
NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could...
CVE-2026-47619
NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A s
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an...
CVE-2026-47618
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause serv
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Cookie settings
Cookie settings
Mozilla Monitor
Mozilla Monitor
The Mozilla Manifesto
The Mozilla Manifesto