MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`
CVE-2026-55071
## Stata Command Injection via Unsanitized `package` in `ado_package_install` ### Summary The `ado_package_install` MC
#advisory
共收录 23530 条相关情报。
← 返回所有主题SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access
CVE-2026-54917
## Summary The S3 API gateway and the Iceberg REST catalog gateway construct their routers with `mux.NewRouter().SkipCl
compliance-trestle has an URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0
CVE-2026-52776
### Summary `compliance-trestle` 4.0.3 (latest) ships an `URLSecurityValidator` in `trestle/core/remote/security.py` to
SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames
CVE-2026-48798
## Summary `ScpClient.Download(string directoryName, DirectoryInfo directoryInfo)` writes files and directories using n
Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint
CVE-2026-48786
### Summary The target search endpoint (`POST /api/latest/fleet/targets`) returned team enroll secrets and full team co
phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration
CVE-2026-47132
### Summary An authenticated SQL LIKE wildcard injection vulnerability in phpMyFAQ’s chat user search allows any logg
nimiq-blockchain: Validity store off by one error
CVE-2026-46369
### Impact The validity store treats a transaction with stored `block_number = X` as "in window" only when `X > last_bn
LibreNMS: Reflected XSS via Proxmox instance/vmid GET parameters injected into document.title JavaScript assignment
CVE-2026-45694
### Summary `LegacyController.php:75` writes the page title into a `document.title` JS assignment using string interpola
Winter: Authenticated backend users can bypass Users controller permission checks
CVE-2026-35445
### Impact Affected versions of Winter CMS did not validate the handler name submitted through the form postback mechan
Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads
CVE-2026-32639
### Impact Affected versions of Winter CMS did not enforce per-template-type permission checks in the CMS section's AJA
Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax
CVE-2026-32593
## Impact The Backend Filter widget (`Backend\Widgets\Filter`) is vulnerable to SQL injection through the `numberrange`
Winter: Stored XSS through Editor Settings custom styles
CVE-2026-32258
### Impact
Winter: Stored XSS through Brand Settings custom styles
CVE-2026-32257
### Impact Users
tablib: Stored XSS in the HTML export via unescaped dataset title
CVE-2026-9318
tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】&【云开发 CloudBase】关于腾讯云 DeepSeek-V4-Flash 正式版及其原厂直供版模型发布通知
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】&【云开发 CloudBase】关于腾讯云 DeepSeek-V4-Flash 正式版及其原厂直供版模型发布通知
Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service
CVE-2025-15687
A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smf_gx_cca_cb of the component SMF
Open5GS HSS Service fd_msg_sess_get denial of service
CVE-2025-15686
A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd_msg_sess_get of the com
tablib versions prior to 3.10.0 Stored XSS via HTML Export Dataset Title
CVE-2026-9318
tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows
Open5GS freeDiameter memory corruption
CVE-2025-15685
A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the componen
Open5GS CER init.c diam_log_func assertion
CVE-2025-15684
A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diam_log_func of the file lib/diameter/com