The Joyland AI app contains hard-coded credentials for the GeTui push notification service,...
CVE-2026-102666
The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to acce
#advisory
共收录 23210 条相关情报。
← 返回所有主题Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-63721
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1....
CVE-2026-84682
A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adj
A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Deco...
CVE-2026-8618
A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Deco M9 Plus due to insuffic
Joyland AI app allows an attacker with shared network access to inject JavaScript into content...
CVE-2026-102667
Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Withou
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-63724
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
The Joyland AI app accepts any TLS certificates from any server without validation.
CVE-2026-102668
The Joyland AI app accepts any TLS certificates from any server without validation.
Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not...
CVE-2026-100251
Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay
Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat...
CVE-2026-102669
Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages.
- Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force)...
CVE-2026-27872
- Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force). This issue affects E
Podgrab contains a missing authentication vulnerability in which the /ws WebSocket route is...
CVE-2026-104058
Podgrab contains a missing authentication vulnerability in which the /ws WebSocket route is registered on the root gin e
Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to...
CVE-2026-15911
Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive inform
Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized...
CVE-2026-104057
Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared
Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached...
CVE-2026-104056
Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or i
Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API...
CVE-2026-104059
Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows un
PictShare < 3.7.1 Predictable Delete Code via rand()
CVE-2026-104356
PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString() function uses the no
PictShare < 3.7.1 Sensitive Information Disclosure via info API
CVE-2026-104051
PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain
Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
CVE-2026-104002
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actor
Uncontrolled recursion in the Ion reader in Amazon Ion Python
CVE-2026-104020
Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor t
figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width
CVE-2026-96780
figlet.js is a FIG driver written in JavaScript that aims to implement the FIGfont specification. Prior to 1.11.3, text(