Devika v1.0 is vulnerable to Directory Traversal in the Coder.save_code_to_project function,...
CVE-2026-51873
Devika v1.0 is vulnerable to Directory Traversal in the Coder.save_code_to_project function, which allows attackers to w
2026-10-02 归档
今日共收录 1399 条安全情报，包含 504 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表In Devika v1.0, the Patcher Agent save_code_to_project function contains a path traversal...
CVE-2026-51874
In Devika v1.0, the Patcher Agent save_code_to_project function contains a path traversal vulnerability that allows atta
PictShare before 3.7.1 contains an information disclosure vulnerability that allows...
CVE-2026-104051
PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain
In Devika v1.0, the Feature Agent save_code_to_project function contains a path traversal...
CVE-2026-51875
In Devika v1.0, the Feature Agent save_code_to_project function contains a path traversal vulnerability that allows atta
deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute. Through the live...
CVE-2026-51880
deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute. Through the live tutorbot WebSocket interface,
deeptutor 1.4.0 contains code injection in ExecTool.execute. Through the live tutorbot WebSocket...
CVE-2026-51881
deeptutor 1.4.0 contains code injection in ExecTool.execute. Through the live tutorbot WebSocket interface, a remote cal
This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by...
CVE-2026-18397
This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination
PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString...
CVE-2026-104356
PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString() function uses the no
ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are...
CVE-2009-20011
ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote comman
Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php...
CVE-2009-20010
Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php script used by its mail su
Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability...
CVE-2009-20009
Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service aut
Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when...
CVE-2009-20008
Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The
: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows :...
CVE-2026-27874
: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-c
Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 ...
CVE-2026-55395
Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLoo
Cleartext transmission without a cryptographic integrity check in operator control unit to robot...
CVE-2026-55396
Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. ...
CVE-2026-71451
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. This issue affects Eas
Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows...
CVE-2026-55394
Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent unauthenticat
Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of...
CVE-2026-102514
Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea co
Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 ...
CVE-2026-55393
Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLo
The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by...
CVE-2026-102671
The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default.