stoatchat before 0.15.5 MFA Bypass via Cross-Account Ticket
CVE-2026-100679
stoatchat before 0.15.5 fails to validate that MFA tickets belong to the authenticated user, allowing attackers to bypas
#advisory
共收录 23334 条相关情报。
← 返回所有主题stoatchat before 0.15.5 MFA Brute Force via Insufficient Rate Limiting
CVE-2026-100678
stoatchat before 0.15.5 fails to enforce account-level attempt limits on MFA login challenges, allowing attackers who kn
stoatchat before 0.15.5 Account Enumeration via Error Location
CVE-2026-100677
stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file loc
stoatchat before 0.15.5 Local Filesystem Read via SVG
CVE-2026-100676
January, the media proxy/embed service of stoatchat (stoatchat/stoatchat), before version 0.15.5 improperly resolves SVG
stoatchat before 0.15.5 Denial of Service via mass mentions
CVE-2026-100675
stoatchat versions before 0.15.5 contain a denial of service vulnerability in the acknowledgement worker that processes
stoatchat before 0.15.5 Username Validation Bypass via Unicode Sanitization
CVE-2026-100674
stoatchat before 0.15.5 fails to revalidate usernames after Unicode sanitization, allowing attackers to create usernames
Grav Data Manager before 1.4.5 Stored XSS via item-detail view
CVE-2026-100673
The Grav Data Manager plugin (getgrav/grav-plugin-datamanager) versions 1.0.1 through 1.4.4 render stored data entries i
Grav before 2.0.25 Session Cookie Theft via Twig Sandbox
CVE-2026-100671
Grav is a flat-file CMS. In versions 2.0.19 through 2.0.24 — and in 2.0.0 through 2.0.18 and 1.7.x only where content Tw
Grav CMS 2.0.14 through 2.0.24 Privilege Escalation via Blueprint Guard Bypass
CVE-2026-100670
Grav CMS 2.0.14 through 2.0.24 contains a privilege escalation vulnerability in the group and account blueprints. The ac
Grav before 2.0.25 Sensitive File Disclosure via Case-Variation Bypass
CVE-2026-100669
Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively.
Grav before 2.0.25 Sandbox Escape via array Filter
CVE-2026-100668
Grav 2.0.0 through 2.0.24 contain a Twig content sandbox escape. The `array` filter (and its identical function form) is
Netty 4.2.0 through 4.2.17 Response Desynchronization via HttpServerCodec
CVE-2026-100666
Netty's HttpServerCodec (io.netty:netty-codec-http) in versions 4.2.0.Final through 4.2.16.Final and in versions up to a
Netty 4.2.11 through 4.2.17 QUIC Hostname Verification Bypass
CVE-2026-100665
Netty versions from 4.2.11.Final before 4.2.18.Final contain an incomplete hostname verification fix in the QUIC certifi
Netty 4.2.2 through 4.2.15 HTTP/1 Host Header Authority Confusion
CVE-2026-100664
Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.2.Final through 4.2.17.Final builds the HTTP/3 :authority
Netty HTTP/1 CONNECT authority-form mistranslated to malformed HTTP/3
CVE-2026-100663
Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.2.Final through 4.2.17.Final does not special-case HTTP/1 CON
Netty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoS
CVE-2026-100662
Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled reso
Netty HTTP/3 QPACK Prefixed Integer DoS via Unbounded Accumulation
CVE-2026-100661
Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final contain a denial-of-service
Netty before 4.2.18.Final QpackEncoder Unbounded Memory Retention
CVE-2026-100660
Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.0.Final through 4.2.17.Final retains unbounded per-stream QPA
Netty 4.2.0 through 4.2.18 HTTP/3 Request Routing Bypass
CVE-2026-100659
Netty's HTTP/3 codec (io.netty:netty-codec-http3) in versions 4.2.0.Final through 4.2.17.Final does not enforce the RFC
Netty before 4.1.138.Final Denial of Service via WebSocketServerExtensionHandler
CVE-2026-100658
Netty (io.netty:netty-codec-http) contains an unbounded per-connection queue in WebSocketServerExtensionHandler. The han