Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
CVE-2026-115776
## Summary An unbounded-buffer vulnerability (CWE-770) in the Twisted words IRC server lets any unauthenticated remote
2026-10-24 归档
今日共收录 814 条安全情报，包含 0 个 CVE，421 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
CVE-2026-115778
## Summary An allocation-without-limits vulnerability (CWE-770) in the Twisted conch telnet transport lets any unauthen
Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
CVE-2026-115775
## Summary An allocation-without-limits vulnerability in the Twisted XML element stream lets any unauthenticated remote
Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
CVE-2026-115877
## Summary An incomplete header-value validation (CWE-444) in the Twisted HTTP server lets a bare carriage return or li
SvelteKit : XSS via untrusted cache-control header in prerendered page
CVE-2026-114061
### Impact Applications that prerender pages and use `setHeaders` to set a `cache-control` header from an untrusted sou
obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes
CVE-2026-115478
### Summary `create_entity`, `link_entities`, `rename_entity`, `unlink_entities` and `delete_entity` regenerate a memory
SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbidden
CVE-2026-73630
### Summary `/api/filetree/authFilePublishAccess` is registered with `CheckAuth` only and is reachable anonymously. It
A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the...
CVE-2026-106073
A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permissio
A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, ...
CVE-2026-106074
A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, an
A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not...
CVE-2026-106071
A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allo
Improper sanitization in the registration module allows reflected Cross-Site Scripting.
CVE-2026-87901
Improper sanitization in the registration module allows reflected Cross-Site Scripting.
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server...
CVE-2026-115813
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier migh
A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the...
CVE-2026-110975
A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return d
Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle...
CVE-2026-115810
Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows aut
京ICP证080047号[京ICP备08010314号-6]
京ICP证080047号[京ICP备08010314号-6]
京网文〔2020〕6051-1195号
京网文〔2020〕6051-1195号
（总）网出证（京）字第281号
（总）网出证（京）字第281号
京公网安备 11000002002063号
京公网安备 11000002002063号
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Cloud ManagerManage your cloud computing services
Cloud ManagerManage your cloud computing services