Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods
CVE-2026-85990
Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation an
#advisory
共收录 23043 条相关情报。
← 返回所有主题TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses
CVE-2026-102989
TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.1
OpenRemote: Cross-Realm User Information Disclosure in UserResourceImpl
CVE-2026-54641
OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRoles, and getUserRealm
OpenRemote: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory
CVE-2026-54640
OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the KNXProtocol.startAssetImport method in ag
ConnectBot SSH: Excessive allocation and integer overflow in DER private-key parsing
CVE-2026-54697
ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readL
ConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocation
CVE-2026-54700
ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protoco
Electron: Local race condition in Squirrel.Mac update installation on macOS
CVE-2026-102672
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10
FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater
CVE-2026-55695
FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an a
Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges
CVE-2026-101899
Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy trea
OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation
CVE-2026-49264
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 0.6.1 until 4.0.0, OAuthLib's Rev
OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparison
CVE-2026-49265
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.0.0 until 4.0.0, OAuthLib's PKC
Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions
CVE-2026-103928
Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and
slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload
CVE-2026-110025
A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file in
Plane: Unauthenticated Workspace Invitation Token Leakage
CVE-2026-102981
Plane is an open-source project management tool. Prior to 1.4.0, self-hosted Plane deployments allow unauthenticated GET
Plane: XSS in work item comments
CVE-2026-102982
Plane is an open-source project management tool. Prior to 1.4.0, the plane comments fail to sanitize unsafe URL schemes
Plane: ORM Field Injection via Unvalidated `order_by` Parameter (Including Unauthenticated Path)
CVE-2026-102988
Plane is an open-source project management tool. Prior to 1.4.0, multiple issue-listing endpoints, including unauthentic
HBAI-Ltd Toonflow-app exportData Endpoint information disclosure
CVE-2026-109526
A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component e
asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter
CVE-2026-102734
asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the
KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map
CVE-2026-69150
KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-bet
JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked
CVE-2026-102832
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit