OnionShare Receive mode writes uploaded files even when file uploads are disabled

CVE-2026-54707

### Summary OnionShare CLI/Desktop 2.6.3 does not enforce the Receive mode `disable_files` setting at the file upload si

历史摘要 · 未重新核验 · GitHub Advisory

Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service

CVE-2026-52856

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a

历史摘要 · 未重新核验 · OSV.dev

Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service

CVE-2026-52856

### Summary A maliciously crafted packet received & parsed during the SFTP connection handshake will cause a Go panic.

历史摘要 · 未重新核验 · GitHub Advisory

Wings exposes node configuration secrets through egg configuration-file templating

CVE-2026-52855

### Impact **Type:** Exposure of sensitive information / insufficiently protected credentials leading to privilege esca

历史摘要 · 未重新核验 · GitHub Advisory

Wings exposes node configuration secrets through egg configuration-file templating

CVE-2026-52855

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, {{

历史摘要 · 未重新核验 · OSV.dev

Wings: Maliciously or erroneously created parsed config files can cause wings process to OOM

CVE-2026-52857

### Summary Config file parsers, `json`, `yaml`, `xml` etc in parser.go have no file size limit/checks, allowing for a g

历史摘要 · 未重新核验 · GitHub Advisory

Wings: Maliciously or erroneously created parsed config files can cause wings process to OOM

CVE-2026-52857

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, un

历史摘要 · 未重新核验 · OSV.dev

`@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation

### Summary `@dynatrace-oss/dynatrace-mcp-server` v1.8.5 exposes an HTTP transport mode (`--http` flag) that performs n

历史摘要 · 未重新核验 · GitHub Advisory

@dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification

### Summary A template injection vulnerability in the `create_workflow_for_notification` tool lets a caller embed Jinja2

历史摘要 · 未重新核验 · GitHub Advisory

LightFTP 2.3.1 Race Condition DoS via worker_thread_cleanup

CVE-2026-67607

LightFTP 2.3.1 contains a race condition vulnerability that allows remote attackers to crash the server by racing a fres

历史摘要 · 未重新核验 · OSV.dev

Missing hop-limit decrement on IPv6 forwarding path allows unbounded packet looping (DoS) in Zephyr routers

CVE-2026-10686

Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit. Both routing

历史摘要 · 未重新核验 · OSV.dev

Serendipity < 2.6.1 Open Redirect via exit.php

CVE-2026-67350

Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to re

历史摘要 · 未重新核验 · OSV.dev

YAML injection via unescaped newlines in ymlr document comments

CVE-2026-65636

Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr (Elixir.Ymlr module) allows attackers to inj

历史摘要 · 未重新核验 · OSV.dev

Path traversal in NotebookRepo note and folder path composition

CVE-2026-44615

Path traversal vulnerability in Apache Zeppelin. When FileSystemNotebookRepo is configured, an authenticated attacker wi

历史摘要 · 未重新核验 · OSV.dev

ComfyUI: Path traversal in LoadImage via the /prompt API allows arbitrary file existence probing and image exfiltration

CVE-2026-56673

ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folder_path

历史摘要 · 未重新核验 · OSV.dev

ComfyUI: Stored XSS via /userdata/{file} due to Missing Content-Type Sanitization

CVE-2026-56672

ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{file} served user-control

历史摘要 · 未重新核验 · OSV.dev

ComfyUI: Path traversal in /experiment/models/preview allows arbitrary image file read

CVE-2026-56671

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, get_model_previ

历史摘要 · 未重新核验 · OSV.dev

ComfyUI: Stored XSS via SVG file upload on the /view endpoint

CVE-2026-56670

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, the /view endpo

历史摘要 · 未重新核验 · OSV.dev

CodeIgniter: Uploaded file extension validation bypass in is_image and mime_in rules

CVE-2026-63223

CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, the is_image and mime_in upload validation rules do not i

历史摘要 · 未重新核验 · OSV.dev

CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames

CVE-2026-63222

CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, calling UploadedFile::move() without a second argument us

历史摘要 · 未重新核验 · OSV.dev