In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible
CVE-2026-106218
In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible
#cwe-184
共收录 172 条相关情报。
← 返回所有主题Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run_shell tool in the CommandLineExecutor component of ufo...
CVE-2026-105791
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the r
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute_command tool in ufo/client/mcp/http_servers/linux_...
CVE-2026-105789
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the e
simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection
CVE-2026-102829
# Security control bypass in `@simple-git/argv-parser`: Git's `VISUAL` editor fallback is not classified as `allowUnsafe
simple-git unsafe-operation guard does not block trailer command configuration
CVE-2026-102828
## Affected product The default `blockUnsafeOperationsPlugin` in `simple-git` when an application permits untrusted val
Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, embedding a URL from an attacker-controlled website could result in untrusted scripts being stored in post...
CVE-2026-105650
Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, embedding a URL from an attacker-controlled websi
Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated use...
CVE-2026-105648
Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, su
A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the file src/DOMSanitizer.php of the component SVG Sanitizatio...
CVE-2026-103687
A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the f
rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist
CVE-2026-103687
A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the f
OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abusable system bina...
CVE-2026-101882
OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that a
simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 2.0.1 of the argv-parser p...
CVE-2026-102829
simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operat
simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the defaul...
CVE-2026-102828
simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operat
fast-mcp-telegram is a Telegram MCP Server. Prior to version 30.1, the send_message/send_message_to_phone MCP tools accept files as a list of http(s) URLs, which the server down...
CVE-2026-55096
fast-mcp-telegram is a Telegram MCP Server. Prior to version 30.1, the send_message/send_message_to_phone MCP tools acce
@bytebase/dbhub's read-only mode does not prevent database writes
CVE-2026-61788
### Summary Setting `readonly = true` on the `execute_sql` tool does not make the connection read-only. The connectors
In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header...
CVE-2026-97149
In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempU
In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method, expiry, and path, an...
CVE-2026-97149
该漏洞影响 OpenStack Swift 2.38.2 之前版本。问题出在 tempurl 中间件: 它在处理已签名的 PUT 请求时, 没有拒绝或剥离 X-Copy-From 请求头, 而 TempURL 签名本身只覆盖 HTTP 方法
A flaw was found in the automation-controller input-validation guard...
CVE-2026-84714
A flaw was found in the automation-controller input-validation guard sanitize_jinja(). The function us
A flaw was found in Ansible Automation Platform's automation-controller. The custom Credential...
CVE-2026-84706
A flaw was found in Ansible Automation Platform's automation-controller. The custom Credential Type environment-variable
A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist...
CVE-2026-75884
A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist that only restricts au
A flaw was found in the automation-controller input-validation guard sanitize_jinja(). The function uses two regular expressions to reject us...
CVE-2026-84714
A flaw was found in the automation-controller input-validation guard sanitize_jinja(). The function us