the-momentum open-wearables Public Invitation-Code Redemption Endpoint user_invitation_code.py redeem_invitation_code missing authentication

CVE-2026-78154

A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem_invitation_c

历史摘要 · 未重新核验 · OSV.dev

CTFd __init__.py _is_safe_url redirect

CVE-2026-78145

A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function _is_safe_url of the file CTFd/u

历史摘要 · 未重新核验 · OSV.dev

Insufficient Session Expiration vulnerability in the OAuth token refresh grant in hexpm hexpm allows a user removed from an organization to keep reading its private packages. e...

CVE-2026-75554

Insufficient Session Expiration vulnerability in the OAuth token refresh grant in hexpm hexpm allows a user removed from

历史摘要 · 未重新核验 · NVD

Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositories permission to read another organization's private pac...

CVE-2026-75542

Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositor

历史摘要 · 未重新核验 · NVD

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileg...

CVE-2026-16348

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative acces

历史摘要 · 未重新核验 · NVD

Improper input validation vulnerability in Apache Camel Undertow component. This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0...

CVE-2026-78329

Improper input validation vulnerability in Apache Camel Undertow component. This issue affects Apache Camel: from 4.1

历史摘要 · 未重新核验 · NVD

Improper input validation vulnerability in Apache Camel Atmosphere Websocket component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, ...

CVE-2026-71300

Improper input validation vulnerability in Apache Camel Atmosphere Websocket component. This issue affects Apache Cam

历史摘要 · 未重新核验 · NVD

Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP...

CVE-2026-66908

Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel:

历史摘要 · 未重新核验 · NVD

Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.1...

CVE-2026-66907

Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affects Apache Camel: from

历史摘要 · 未重新核验 · NVD

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from...

CVE-2026-66906

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel:

历史摘要 · 未重新核验 · NVD

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Knative component Th...

CVE-2026-63621

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Inject

历史摘要 · 未重新核验 · NVD

Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, f...

CVE-2026-60093

Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Came

历史摘要 · 未重新核验 · NVD

Improper input validation vulnerability in Apache Camel. This issue affects Apache Camel: from 2.17.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. ...

CVE-2026-59230

Improper input validation vulnerability in Apache Camel. This issue affects Apache Camel: from 2.17.0 before 4.14.9,

历史摘要 · 未重新核验 · NVD

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrativ...

CVE-2026-6017

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sens

历史摘要 · 未重新核验 · NVD

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or ...

CVE-2025-63080

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform o

历史摘要 · 未重新核验 · NVD

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account

CVE-2026-18963

Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity a

历史摘要 · 未重新核验 · The Hacker News

Compatibility Test Suite (CTS)

本公告来自 Android Security Bulletin，内容为 Compatibility Test Suite (CTS) 的发布或更新说明。CTS 是 Android 平台用于验证设备实现与 Android 兼容性定义 (CDD

历史摘要 · 未重新核验 · Android Security Bulletin

Compatibility Definition Document (CDD)

本输入为 Android 兼容性定义文档（Compatibility Definition Document, CDD）的公告信息，并非安全漏洞公告。该文档由 Android Security Bulletin 于 2026-08-25 发

历史摘要 · 未重新核验 · Android Security Bulletin

Tools, build, and related reference

该条目来自Android Security Bulletin，标题为'Tools, build, and related reference'，表示这是一个关于工具、构建及相关参考的页面。输入中未包含任何CVE编号、漏洞描述、受影响产品或严

历史摘要 · 未重新核验 · Android Security Bulletin

Latest Compatibility Definition Document (CDD)

本公告来自 Android 安全公告，主题为“最新兼容性定义文档（CDD）”。CDD 是 Android 生态系统中用于定义设备兼容性要求的官方文档，旨在确保不同厂商的 Android 设备能够兼容运行应用、提供一致的用户体验，并满足安全与

历史摘要 · 未重新核验 · Android Security Bulletin