Mongoose: Stored XSS via unescaped filenames in directory listing
CVE-2026-73254
Mongoose is an embedded web server and network library. Prior to 7.22, an attacker who can create a file with an HTML pa
#advisory
共收录 23530 条相关情报。
← 返回所有主题broot Terminal Escape Sequence Injection via Unsanitized File and Directory Names in the Tree View
CVE-2026-72847
broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are c
Lean 4 Kernel Type Checking Bypass via Mismatched Structure Projections
CVE-2026-72844
The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value bein
Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_search
CVE-2026-54136
Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to 1.71
Plate: SSRF with response disclosure in DOCX image embedding
CVE-2026-65842
Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.2, @platejs/docx-io fetches remote image URLs while con
SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files
CVE-2026-55586
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, a crafted CHM file can supply malformed LZX Huffm
Hurl: Cookies in Cookies section leak when redirecting to a different host
CVE-2026-63481
Hurl is a command line tool that runs and tests HTTP requests defined in plain text files. In version 8.0.1 and earlier,
OpenProject: Inplace-edit dialog exposes comments from hidden admin-only project custom fields
CVE-2026-55095
OpenProject is open-source, web-based project management software. In version 17.5.1 and earlier, an authenticated non-a
Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability
CVE-2026-15686
Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability. This vulnerability all
GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability
CVE-2026-18309
GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability
CVE-2026-18308
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-18307
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a
GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability
CVE-2026-18306
GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability
CVE-2026-18305
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability
CVE-2026-18304
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-18303
GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-18302
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a
Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability
CVE-2026-18287
Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allo
Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability
CVE-2026-18286
Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability. This vulnerability al
Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2026-18285
Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability a