AT_SECURE program buffer overflow via $ORIGIN processing
CVE-2026-95818
A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allo
#advisory
共收录 23334 条相关情报。
← 返回所有主题Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode
CVE-2026-76805
Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass
CVE-2026-76802
Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading b
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass
CVE-2026-76804
Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the workflow template loadi
Nuclei: Local File Read via MySQL Client Sandbox Bypass
CVE-2026-76803
Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the nuclei/mysql JavaScript
Sentry: Unsafe pickle deserialization in Relocation Feature
CVE-2026-83803
Sentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the reloca
LightRAG: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content
CVE-2026-86062
LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightrag_webui/src/components/retrieva
LightRAG: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard
CVE-2026-85740
LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, _validated_addresses in lightrag/parse
LightRAG: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks
CVE-2026-85734
LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint in lightrag/a
Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key
CVE-2026-94455
An HTTP endpoint intended for provisioning enterprise and reseller organisations is reachable without any session. The a
LightRAG: Plaintext Passwords Compared Without Constant-Time Function
CVE-2026-85725
LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, verify_password in lightrag/api/passwo
LightRAG: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses
CVE-2026-85709
LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the LightRAG API server returns raw Py
Dokploy: Git Provider Credential Exposure via Unprotected .one Endpoints and application.one
CVE-2026-86059
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy organization members without Gi
Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys
CVE-2026-94456
Postiz generates security-sensitive credentials using `Math.random()` instead of a cryptographically secure source. The
9Router: Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Header
CVE-2026-56682
9Router is an AI router & token saver. Prior to 0.5.6, 9Router deployments that allow requests to reach Next.js without
9Router: Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Header
CVE-2026-56681
9Router is an AI router & token saver. Prior to 0.5.6, 9Router deployments that allow requests to reach Next.js without
AT_SECURE programs may load attacker-controlled code via $ORIGIN
CVE-2026-86805
A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versio
Novu: Cross-Environment Integration Manipulation (IDOR)
CVE-2026-75517
Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use
Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs
CVE-2026-75511
Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu accepts chat webhook URL
Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: scheme
CVE-2026-75510
Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu's @novu/js In-App Inbox