Dromara mayfly-go AI Assistant ai.go authorization
CVE-2026-92992
A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown functio
#advisory
共收录 23421 条相关情报。
← 返回所有主题punchin-email: Operator inbox (FORWARD_TO) disclosed to correspondents on reply — Cloudflare forward() drops the relay Reply-To
CVE-2026-54649
punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to a private inbox. Pr
ESPAsyncWebServer: Integer overflow in multipart boundary parser causes denial of service
CVE-2026-54571
ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to 3
FaustWP — Authentication Bypass via Initialization Vector Modification in Token Envelope
CVE-2026-54239
Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertex
uniget: EDITOR Command Injection in uniget CLI
CVE-2026-55061
uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget
uniget: Path Traversal in Hook Files - Directory Escape Vulnerability
CVE-2026-55062
uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget
Elixir protobuf: Unbounded recursion depth in embedded-message decoding
CVE-2026-54451
Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attack
Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari)
CVE-2026-47252
Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INSERT or UPDATE access
OpenDDS: out-of-bounds `rd_ptr` dereference in `RtpsSampleHeader::init` — triggered by malformed RTPS submessage, remotely exploitable denial of service
CVE-2026-52836
OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). Prior
Scoold: GET /api/posts/{id}/answers leaks private-space replies when personal API tokens are enabled
CVE-2026-54676
Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, users with personal API tokens can retrieve
Scoold: Authenticated user can post replies and comments to private-space questions without space membership
CVE-2026-54677
Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of
NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode
CVE-2026-54446
NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensi
Many Notes: Path Traversal via ZIP import allows arbitrary file write and stored XSS in other users' vaults
CVE-2026-54053
Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import impl
WireGuard Portal: Authenticated WebSocket /api/v0/ws broadcasts all peers' and interfaces' traffic stats to every user (missing per-user authorization)
CVE-2026-54551
WireGuard Portal, or wg-portal, is a web-based configuration portal for WireGuard server management. From 2.2.0 until 2.
rabbitmq-c: size_t underflow in AMQP frame length computation leads to out-of-bounds read
CVE-2026-44235
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an unders
rabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_max
CVE-2026-44236
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an unders
CloudTAK: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard
CVE-2026-54546
CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to 13.22.
batman-adv: dat: atomically update mac addresses
CVE-2026-93204
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: atomically update mac addresses W
batman-adv: bla: avoid CRC corruption due to parallel claim add
CVE-2026-93203
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corruption due to parall
i3c: master: Fix recursive locking during device registration
CVE-2026-93202
In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device re