PrivateBin has stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction

CVE-2026-55696

### Summary Stored cross-site scripting (XSS) in PrivateBin's attachment download link. An anonymous attacker can creat

历史摘要 · 未重新核验 · GitHub Advisory

AIIR verification and policy gates could report success without enforcing the control (fail-open)

### Summary Several of AIIR's verification and policy paths could return a success/"verified" result without actually en

历史摘要 · 未重新核验 · GitHub Advisory

alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

CVE-2026-55484

### Summary A single unauthenticated HTTP request to a path starting with `?` (e.g. `GET ? HTTP/1.1`) crashes the entire

历史摘要 · 未重新核验 · GitHub Advisory

Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name

CVE-2026-55634

## Overview A DataObject **class-definition field name** is concatenated, without an identifier allowlist, into the PHP

历史摘要 · 未重新核验 · GitHub Advisory

Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column (PHP Object Injection, CWE-502)

CVE-2026-55220

## Summary `Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource()` deserializes the `*__hot

历史摘要 · 未重新核验 · GitHub Advisory

Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation

CVE-2026-55212

### Summary The Studio API class definition creation endpoint in `pimcore/studio-backend-bundle` is guarded by the `obje

历史摘要 · 未重新核验 · GitHub Advisory

Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes

CVE-2026-55208

## Summary An authenticated user extracts the admin password hash and any other database content through a time-based b

历史摘要 · 未重新核验 · GitHub Advisory

Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass

CVE-2026-55207

## Summary An unauthenticated attacker takes over any Pimcore admin account by sending a password reset request with an

历史摘要 · 未重新核验 · GitHub Advisory

SpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exposed Feign Endpoint

CVE-2026-56100

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows a

历史摘要 · 未重新核验 · OSV.dev

wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

CVE-2026-81341

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer

历史摘要 · 未重新核验 · OSV.dev

wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

CVE-2026-81020

wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increme

历史摘要 · 未重新核验 · OSV.dev

wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

CVE-2026-81019

wolfProvider before 1.2.2 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never incre

历史摘要 · 未重新核验 · OSV.dev

Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun

CVE-2026-58107

CodeChecker's massStoreRun processing path performs one-shot decompression of attacker-controlled, Base64-encoded zlib d

历史摘要 · 未重新核验 · OSV.dev

Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation

CVE-2026-58106

CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r  was fixed by replacing unchecked strcpy() with a bound

历史摘要 · 未重新核验 · OSV.dev

WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint

CVE-2026-5934

The WP Rocket plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.21.0

历史摘要 · 未重新核验 · OSV.dev

iswalle getnote-mcp upload_image index.ts fs.readFileSync path traversal

CVE-2026-82111

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of

历史摘要 · 未重新核验 · OSV.dev

SvelteKit 2.49.0 before 2.53.3 Denial of Service via form

CVE-2026-82259

SvelteKit versions from 2.49.0 through 2.53.2 (fixed in 2.53.3) contain a deserialization expansion issue in the experim

历史摘要 · 未重新核验 · OSV.dev

SvelteKit 2.38.0 before 2.60.1 Cross-User Data Disclosure via query.batch

CVE-2026-82258

SvelteKit versions from 2.38.0 before 2.60.1 contain a race condition in query.batch that allows concurrent requests fro

历史摘要 · 未重新核验 · OSV.dev

SvelteKit before 2.69.1 Prototype Pollution via File Input

CVE-2026-82257

SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fi

历史摘要 · 未重新核验 · OSV.dev

SvelteKit before 2.69.1 Denial of Service via Remote Form

CVE-2026-82256

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the N

历史摘要 · 未重新核验 · OSV.dev