#cwe-1259

共收录 6 条相关情报。

← 返回所有主题
漏洞预警2026-09-16 发布INFO

A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to lo...

CVE-2026-76413

A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Softw

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

CVE-2026-58429

Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

历史摘要 · 未重新核验 · NVD

安全公告2026-08-13 发布INFO

Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

CVE-2026-58429

Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-28 发布INFO

Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2, the Wings /upload/file endpoint accepted any valid panel...

CVE-2026-54593

Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2,

历史摘要 · 未重新核验 · NVD

安全公告2026-07-28 发布INFO

Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions

CVE-2026-54593

Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2,

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-21 发布INFO

Gitea: Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

CVE-2026-58429

### Summary A personal access token restricted with the public-only scope can still retrieve private organization member

历史摘要 · 未重新核验 · GitHub Advisory