PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling

CVE-2026-119193

### Summary When PHPT tests are run with code coverage, PHPUnit 13.4.0 to 13.4.3 writes the code of each PHPT test to a

来源摘录 · GitHub Advisory

AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE

CVE-2026-96634

### Summary This vulnerability is a patch bypass that exploits catastrophic backtracking in a regular expression used t

来源摘录 · GitHub Advisory

AdminNeo SQLite Database-List Drop Arbitrary File Deletion

CVE-2026-96633

## Summary AdminNeo allows an authenticated SQLite-mode user to delete arbitrary files writable by the PHP process thro

来源摘录 · GitHub Advisory

AdminNeo has Cookie Attribute Injection via Unsanitized X-Forwarded-Prefix in Set-Cookie Headers

CVE-2026-96631

### Summary AdminNeo versions 4.6.0 through at least 5.5.0 are vulnerable to cookie attribute injection via the `X-Forw

来源摘录 · GitHub Advisory

AdminNeo Vulnerable to XSS via Rogue MySQL Server Version String (CSP Nonce Bypass)

CVE-2026-96632

## Summary AdminNeo inserts the database server's version string into a `` tag that carries a valid CSP nonce, without

来源摘录 · GitHub Advisory

AdminNeo: RCE via SQLite VACUUM INTO (ATTACH Blocklist Bypass)

CVE-2026-96630

## Summary Adminer blocks `ATTACH` queries for SQLite to prevent arbitrary file creation. However, `VACUUM INTO` is not

来源摘录 · GitHub Advisory

AdminNeo: CSRF Token Secret Recoverable from Single Observed Token, Enabling Cross-Site Request Forgery

CVE-2026-96629

### Summary AdminNeo's CSRF protection uses a BREACH-resistant XOR masking scheme, but the implementation transmits bot

来源摘录 · GitHub Advisory

PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory() logic in src/Runner/Phpt/TestCase.php creates temporary files for PHPT c...

CVE-2026-119193

PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory() logic in src/Ru

来源摘录 · NVD / GitHub Advisory

PocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packets

### Summary During the resource pack stage of logging in, after the server sends `ResourcePackStackPacket`, a malicious

来源摘录 · GitHub Advisory

MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow

CVE-2026-55186

### Impact In CMS 5, the password reset flow let a user with multi-factor authentication enabled change their password a

来源摘录 · GitHub Advisory

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization

CVE-2026-116675

### Impact Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via elements crafted thr

历史摘要 · 未重新核验 · GitHub Advisory

Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process

CVE-2026-109413

### Description `Yaml\Parser::lexInlineStructure()` recursed through `lexInlineMapping()` and `lexInlineSequence()` for

历史摘要 · 未重新核验 · GitHub Advisory

Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

CVE-2026-108082

### Description `HeaderUtils::split()` parsed header values with a pattern whose token alternative also matched whitesp

历史摘要 · 未重新核验 · GitHub Advisory

Laravel TokenGuard authentication bypass through non-string API credentials

CVE-2026-114509

Laravel's built-in TokenGuard, **when configured with a standard token-based API guard**, may be bypassed to authenticat

历史摘要 · 未重新核验 · GitHub Advisory

Laravel relationship inclusion can trigger unauthorized data destruction

CVE-2026-114508

A vulnerability in how relationship inclusion is processed on certain read endpoints. Under specific conditions, a reque

历史摘要 · 未重新核验 · GitHub Advisory

Livewire: Authorization bypass in #[Authorize] via reordered parameter keys and #[Json] execution order

### Impact Three issues allowed actions protected by the `#[Authorize]` attribute to run against records the current us

历史摘要 · 未重新核验 · GitHub Advisory

Cachet has Stored XSS in Incident Component

CVE-2026-113712

### Summary A stored Cross-Site Scripting (XSS) vulnerability exists in the incident creation form, allowing an authenti

历史摘要 · 未重新核验 · GitHub Advisory

Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabled

CVE-2026-107842

`ModuleSearch` decides whether to filter protected pages out of search results based on the current value of `contao.sea

历史摘要 · 未重新核验 · GitHub Advisory

Contao: The registration module re-sends activation mails

CVE-2026-107843

`ModuleRegistration::compile()` reaches its follow-up registration branch on **any** POST to a page carrying the module.

历史摘要 · 未重新核验 · GitHub Advisory

Contao: Cross-site request forgery in custom backend actions

CVE-2026-107848

`RequestTokenListener` is the only generic `REQUEST_TOKEN` validator in Contao and it only runs on POST. On the GET side

历史摘要 · 未重新核验 · GitHub Advisory