browse-mcp has an arbitrary file write via unconfined download and state paths
CVE-2026-55557
### Impact `browser_download` wrote a fetched file to `join(save_dir, filename)` with no validation of `save_dir`, and `
#advisory
共收录 23507 条相关情报。
← 返回所有主题qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`
CVE-2026-55585
### Summary The `qwed` package (version 5.1.1) passes attacker-controlled input directly to SymPy's `parse_expr()` func
urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage
CVE-2026-55553
## Summary urllib supports redirect-following through `followRedirect`, which is expected behavior for an HTTP client.
Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files
CVE-2026-55677
### Summary Echo's router and static file handler disagree on URL path decoding. The router matches routes using the ra
djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls
CVE-2026-55571
### Impact djust's `LiveViewConsumer` mounts a `LiveView` over a WebSocket. When a view is gated (`login_required` / `p
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】&【云开发 CloudBase】关于腾讯云 DeepSeek-V4 正式版【原厂直供】模型计费调整通知
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】&【云开发 CloudBase】关于腾讯云 DeepSeek-V4 正式版【原厂直供】模型计费调整通知
【广告作弊检测】“流量反欺诈”改名为“广告作弊检测”
【广告作弊检测】“流量反欺诈”改名为“广告作弊检测”
【TDSQL-C MySQL 版】数据库代理监控视图升级通知
【TDSQL-C MySQL 版】数据库代理监控视图升级通知
【腾讯云认证】腾讯云运维高级工程师认证升级公告
【腾讯云认证】腾讯云运维高级工程师认证升级公告
Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat...
CVE-2026-78268
Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Tel
Unauthenticated Cross Site Scripting (XSS) in Stripe Payments <= 2.1.2 versions.
CVE-2026-78282
Unauthenticated Cross Site Scripting (XSS) in Stripe Payments <= 2.1.2 versions.
A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController:...
CVE-2026-78434
A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::post_ticket_reply of the
A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of...
CVE-2026-78435
A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Contr
Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions.
CVE-2026-78284
Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions.
Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions.
CVE-2026-78262
Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions.
Unauthenticated SQL Injection in Boost <= 2.0.4 versions.
CVE-2026-32555
Unauthenticated SQL Injection in Boost <= 2.0.4 versions.
Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.
CVE-2026-32559
Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.
Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.
CVE-2026-78265
Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.
CVE-2026-32554
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.
Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63...
CVE-2026-32563
Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.