#CVE

共收录 63861 条相关情报。

漏洞预警2026-10-27 发布CRITICAL

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

CVE-2026-117861

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunder

来源摘录 · NVD

#cve #cwe-693

漏洞预警2026-10-27 发布HIGH

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

CVE-2026-117860

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153

来源摘录 · NVD

#cve #cwe-346

漏洞预警2026-10-27 发布MEDIUM

Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plugin that allows malicious NWC clients to exceed daily_limit_sat by exploiting...

CVE-2026-117603

Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plugin that allows mali

来源摘录 · NVD

#cve #cwe-367

漏洞预警2026-10-27 发布HIGH

Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's init.py module when the plugin is marked enabled in the...

CVE-2026-117602

Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __

来源摘录 · NVD

#cve #cwe-347

漏洞预警2026-10-27 发布HIGH

Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing malicious servers to replace a just-broadcast transaction w...

CVE-2026-117601

Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing ma

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-347 #pip #severity:critical

漏洞预警2026-10-27 发布HIGH

hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args paramete...

CVE-2026-117573

hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell co

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布MEDIUM

Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan_vulnerabilities tool that lets callers run blocked NSE script categ...

CVE-2026-117570

Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan_vulnerabil

来源摘录 · NVD

#cve #cwe-183

漏洞预警2026-10-27 发布HIGH

Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_server.py that allows MCP clients to run commands via unsa...

CVE-2026-117569

Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_s

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布HIGH

mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the res...

CVE-2026-117568

mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by s

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布HIGH

esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool param...

CVE-2026-117567

esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary com

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布MEDIUM

EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload...

CVE-2026-117566

EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-27 发布MEDIUM

Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by submitting ano...

CVE-2026-117565

Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-27 发布CRITICAL

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET commi...

CVE-2026-117564

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge a

来源摘录 · NVD

#cve #cwe-321

漏洞预警2026-10-27 发布MEDIUM

MrDoc through 1.1.1 contains a broken access control vulnerability in the manage_doc_share type 3 branch that allows authenticated users to modify other users' document share se...

CVE-2026-117563

MrDoc through 1.1.1 contains a broken access control vulnerability in the manage_doc_share type 3 branch that allows aut

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-27 发布MEDIUM

rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read stories from unpublished feeds through the anonymous publ...

CVE-2026-117562

rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-27 发布HIGH

Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag value...

CVE-2026-117561

Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell com

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布HIGH

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attackers to execute shell commands through unsanitized MCP tool ...

CVE-2026-117560

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attacker

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布HIGH

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $(...) or backtick substitution. Attack...

CVE-2026-117559

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command a

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布HIGH

The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in the re...

CVE-2026-117558

The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to exe

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布MEDIUM

SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM m...

CVE-2026-117557

SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/

来源摘录 · NVD

#cve #cwe-125