Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass
CVE-2026-111057
### Summary A missing comma in `mercury_app/block_handler.py`'s `BLOCKED_PATTERNS` list causes the blocklist to fail to
#advisory
共收录 22969 条相关情报。
← 返回所有主题agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
## Summary The MCP proxy's client-facing session ID embeds the authenticated caller's subject (JWT `sub` claim) specifi
Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo
## Summary The Fortran extractor's C-preprocessor step (`graphify/extractors/fortran.py`, `_cpp_preprocess`) applies an
Mercury: Unauthenticated Remote Code Execution via /api/kernels
CVE-2026-111058
Mercury runs a JupyterLab server with **anonymous access by default** (`mercury_app/__main__.py` sets `--IdentityProvide
LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files
CVE-2026-108372
## Summary `loopx serve-status` sends `Access-Control-Allow-Origin: *` on **every** response, including its unauthentic
【TDSQL-C MySQL 版】关于 DBMaster 组件升级的公告
【TDSQL-C MySQL 版】关于 DBMaster 组件升级的公告
A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. Impacted is the...
CVE-2026-112043
A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. Impacted is the function createWebhookProcedur
A vulnerability was identified in diem-project diem up to...
CVE-2026-112041
A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability a
A security flaw has been discovered in diem-project diem up to...
CVE-2026-112042
A security flaw has been discovered in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This issue affe
Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the...
CVE-2026-102503
Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress s
Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE...
CVE-2026-103091
Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (H
A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad....
CVE-2026-112037
A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected is an unknown functi
A vulnerability has been found in diem-project diem up to...
CVE-2026-112038
A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this vul
在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷...
CVE-2026-111441
在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 len
A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad....
CVE-2026-112039
A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this issue is
A security vulnerability has been detected in dotnet eShop up to...
CVE-2026-112044
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected
A vulnerability was determined in diem-project diem up to...
CVE-2026-112040
A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This affects an unkn
A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects...
CVE-2026-112035
A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function send_message
A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
CVE-2026-108983
A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function...
CVE-2026-112036
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/