SumatraPDF — Windows command-line argument injection in AI selection-translate
CVE-2026-107802
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, src/SelectionTranslate.cpp embeds selected or pas
#advisory
共收录 23210 条相关情报。
← 返回所有主题SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata
CVE-2026-107736
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap() asks GDI+ to read the attacker-
SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization)
CVE-2026-107735
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, InitializePolicies() starts the sumatrapdfrestric
SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors
CVE-2026-107734
SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is
SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service
CVE-2026-107731
SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, four independently reachable range-validation variants
SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read
CVE-2026-107730
SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader() in src/LitDoc.cpp computes the attacke
SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read
CVE-2026-107729
SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.
Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy
CVE-2026-107728
Strawberry GraphQL is a library for creating GraphQL APIs. From 0.217.0 until 0.326.1, PermissionExtension.resolve() on
Strawberry legacy graphql-ws retains naturally completed subscription slots
CVE-2026-107727
Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscriptio
fast-jwt: Verifier cache accepts expired JWTs without iat.
CVE-2026-107719
### Summary `cacheSet` only derives its `exp` cache deadline inside `hasIat` (`src/verifier.js:127-140`). JWT `iat` is o
Hazelcast allows arbitrary member memory access by low-privileged client
CVE-2026-107726
### Impact A flaw has been found in Hazelcast Enterprise Edition and Community Edition, which would allow a low-privile
Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry
CVE-2026-107716
### Summary In `banks.registries.DirectoryPromptRegistry`, prompt file paths and the index file (`index.json`) do not re
Banks: User-controlled prompt input can be parsed as privileged chat messages
CVE-2026-107717
## Summary Banks' `Prompt.chat_messages()` method parses every rendered output line as a potential `ChatMessage` JSON
Indico: Incomplete Server-Side Request Forgery (SSRF) check
CVE-2026-107394
### Impact Indico makes outgoing requests to user-provides URLs in various places. This is mostly intentional and part o
Indico: Missing access check in legacy session export API
CVE-2026-107395
### Impact A legacy API to retrieve session details could be misused to retrieve metadata (such as title, description an
Indico: Cross-Site-Scripting in minutes editor
CVE-2026-107397
### Impact There is a Cross-Site-Scripting vulnerability in the minute editor conflict UI tha's shown when concurrent ed
Indico: Cross-Site-Scripting in link fields
CVE-2026-107396
### Impact There is a Cross-Site-Scripting vulnerability in fields that allow entering custom URLs. ### Patches You sho
Hazelcast has an authorization bypass in IMap Predicates API
CVE-2026-107725
### Impact Missing authorization checks in the [Predicates API](https://docs.hazelcast.com/hazelcast/5.7/query/predicat
AdonisJS: Unencoded route parameters can produce open redirects
CVE-2026-107718
Route parameters are inserted into generated URLs without URI encoding. When an application passes untrusted input to a
Mechanize sends credential headers to another origin after a meta refresh
CVE-2026-107399
## Summary `mechanize` applied no trust boundary to a `meta` refresh, so credentials set through `Mechanize#request_hea