YesWiki before 4.6.7 CSRF Attachment Deletion via filemanager Handler
CVE-2026-104452
YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the filemanager page handler, which deletes
2026-10-03 归档
今日共收录 1361 条安全情报，包含 499 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表YesWiki before 4.6.7 CSRF Page Revision Restore via RevisionsHandler
CVE-2026-104451
YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in RevisionsHandler that allows attackers to re
YesWiki before 4.6.7 Unauthenticated Page Overwrite via Bazar id_fiche
CVE-2026-104449
YesWiki before 4.6.7 contains an access control vulnerability allowing unauthenticated attackers to overwrite any existi
YesWiki before 4.6.7 CSRF Page Deletion via ajaxdeletepage Handler
CVE-2026-104448
YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the ajaxdeletepage handler, which permanentl
YesWiki before 4.6.7 CSRF Package Deletion via autoupdate UpdateAction
CVE-2026-104447
YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the autoupdate UpdateAction that allows atta
YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler
CVE-2026-104446
YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated atta
YesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor Spoofing
CVE-2026-104445
YesWiki before 4.6.7 contains an authentication bypass vulnerability in the ActivityPub inbox that fails to bind the ver
YesWiki before 4.6.7 Authorization Bypass via Comments API editComment
CVE-2026-104444
YesWiki before 4.6.7 contains an authorization bypass vulnerability in the comments API editComment route that allows au
YesWiki before 4.6.7 Scope Bypass via Triples Delete API
CVE-2026-104443
YesWiki before 4.6.7 contains an empty-filter scope bypass in the triples delete API that allows any authenticated user
YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action
CVE-2026-104442
YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers
YesWiki before 4.6.7 Unauthenticated SSRF via valeur Action
CVE-2026-104441
YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers
YesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce Parameter
CVE-2026-104440
YesWiki before 4.6.7 contains a blind server-side request forgery vulnerability that allows unauthenticated attackers to
YesWiki before 4.6.7 User Enumeration via Lost-Password Flow
CVE-2026-104439
YesWiki before 4.6.7 contains a user enumeration vulnerability in LostPasswordAction.php that allows unauthenticated att
YesWiki before 4.6.7 Information Disclosure via listpagestag and includepages Actions
CVE-2026-104438
YesWiki before 4.6.7 contains a missing authorization vulnerability in the listpagestag and includepages actions of the
Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling
CVE-2026-104437
Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a Z
Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Length
CVE-2026-104436
Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust b
Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output
CVE-2026-104435
Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs sign
Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC
CVE-2026-104434
ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the z_listunifiedr
Zebra before 6.3.0 False Readiness via Discarded One-Hash FindBlocks Response
CVE-2026-104432
Zebra before 6.3.0 contains an improper exceptional condition check in ChainSync::obtain_tips that discards valid one-ha
Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification
CVE-2026-104431
Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers to stall Tokio workers b