SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames

CVE-2026-48798

## Summary `ScpClient.Download(string directoryName, DirectoryInfo directoryInfo)` writes files and directories using n

历史摘要 · 未重新核验 · GitHub Advisory

Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint

CVE-2026-48786

### Summary The target search endpoint (`POST /api/latest/fleet/targets`) returned team enroll secrets and full team co

历史摘要 · 未重新核验 · GitHub Advisory

phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration

CVE-2026-47132

### Summary An authenticated SQL LIKE wildcard injection vulnerability in phpMyFAQ’s chat user search allows any logg

历史摘要 · 未重新核验 · GitHub Advisory

nimiq-blockchain: Validity store off by one error

CVE-2026-46369

### Impact The validity store treats a transaction with stored `block_number = X` as "in window" only when `X > last_bn

历史摘要 · 未重新核验 · GitHub Advisory

LibreNMS: Reflected XSS via Proxmox instance/vmid GET parameters injected into document.title JavaScript assignment

CVE-2026-45694

### Summary `LegacyController.php:75` writes the page title into a `document.title` JS assignment using string interpola

历史摘要 · 未重新核验 · GitHub Advisory

Winter: Authenticated backend users can bypass Users controller permission checks

CVE-2026-35445

### Impact Affected versions of Winter CMS did not validate the handler name submitted through the form postback mechan

历史摘要 · 未重新核验 · GitHub Advisory

Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads

CVE-2026-32639

### Impact Affected versions of Winter CMS did not enforce per-template-type permission checks in the CMS section's AJA

历史摘要 · 未重新核验 · GitHub Advisory

Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax

CVE-2026-32593

## Impact The Backend Filter widget (`Backend\Widgets\Filter`) is vulnerable to SQL injection through the `numberrange`

历史摘要 · 未重新核验 · GitHub Advisory

Winter: Stored XSS through Editor Settings custom styles

CVE-2026-32258

### Impact

历史摘要 · 未重新核验 · GitHub Advisory

Winter: Stored XSS through Brand Settings custom styles

CVE-2026-32257

### Impact Users

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability

CVE-2026-62902

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability

CVE-2026-62871

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability

CVE-2026-62897

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability

CVE-2026-70354

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability

CVE-2026-62909

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability

CVE-2026-62886

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability

CVE-2026-62901

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability

CVE-2026-62899

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability

CVE-2026-62898

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。

Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。

历史摘要 · 未重新核验 · 知道创宇 / Seebug