FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
CVE-2026-73661
FreePBX is an open source IP PBX. Prior to 16.0.47 and 17.0.30, the FreePBX Framework module permits a crafted backup to
#advisory
共收录 23530 条相关情报。
← 返回所有主题Trigger.dev: Cross-tenant object read/write via path traversal in packet presign API
CVE-2026-73659
Trigger.dev is the open-source platform for building AI workflows in TypeScript. From 4.4.2 until 4.5.0, the packet pres
dua-cli Terminal Escape Sequence Injection via Marked Paths
CVE-2026-73479
dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attac
Trigger.dev: Cross-tenant object store read and write via URL path traversal
CVE-2026-73658
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5,
Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS
CVE-2026-73654
## Summary The run-metadata update endpoint `PUT /api/v1/runs/:runId/metadata` applies client-supplied "operations" by
nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences
CVE-2026-12243
# Summary nltk.data.load() and nltk.data.find() resolve user-supplied resource names to filesystem paths using url2pathn
Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath
CVE-2026-8715
Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in th
Trigger.dev: Cross-project deployment worker registration can modify another project's deployment state
CVE-2026-73656
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.6, POST /api/v1
Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS
CVE-2026-73654
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the
compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal
CVE-2026-45774
compliance-trestle is a tooling platform for managing compliance as code. Prior to versiions 3.12.2 and 4.0.3, the compl
WsgiDAV encoded dot segments can escape filesystem share roots
CVE-2026-48099
WsgiDAV is a generic and extendable WebDAV server based on WSGI. WsgiDAV 4.3.3 and prior can allow a WebDAV request path
Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)
CVE-2026-59714
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any auth
django-helpdesk < 2.3.3 Stored XSS via HTML Attachments
CVE-2026-73531
django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers
phpList < 3.7.0-RC5 Cross-Site Request Forgery via Bounce Rules
CVE-2026-73481
phpList before 3.7.0-RC5 fail to enforce CSRF token validation on the bounce rule deletion endpoint (bouncerules.php / b
vLLM: Completion prompt lists fan out into unbounded engine requests
CVE-2026-73559
## Summary The `/v1/completions` request model accepts `prompt` as a list of text prompts or a list of token-id prompts
Next AI Draw.io 0.2.1 - 0.4.16 Reflected XSS via unsanitized mcp query parameter
CVE-2026-73037
Next AI Draw.io 0.2.1 through 0.4.16 contains a reflected cross-site scripting vulnerability in the mcp query parameter
TypeORM: migration:generate template-literal code injection
CVE-2026-73651
TypeORM is a TypeScript and JavaScript ORM for Node.js that supports PostgreSQL, MySQL, MariaDB, SQLite, SQL Server, Ora
Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of CVE-2026-44966 fix)
CVE-2026-73649
Velocity.js is a JavaScript implementation of the Apache Velocity template engine. Prior to 2.1.7, the earlier fix for C
OpenZeppelin Confidential Contracts ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds.
CVE-2026-73645
OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Zama fhEVM. Prior to 0
js-yaml: Exponential parsing time in the flow collections leads to denial of service
CVE-2026-73643
js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponenti