Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass
CVE-2026-111057
### Summary A missing comma in `mercury_app/block_handler.py`'s `BLOCKED_PATTERNS` list causes the blocklist to fail to
#cwe-284
共收录 1962 条相关情报。
← 返回所有主题Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab...
CVE-2026-111057
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4,
The Gitea web handlers for adding and removing reactions on issues and comments did not refuse locked issues for users without write access, although the API did. A signed-in us...
CVE-2026-107686
The Gitea web handlers for adding and removing reactions on issues and comments did not refuse locked issues for users w
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Spa...
CVE-2026-61726
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, St
Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user...
CVE-2026-111388
Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user restrict_ip allowlist for non-ses
Backstage: Improper access control in backend action invocation
CVE-2026-106495
### Impact An authenticated user could invoke actions that an operator had excluded through action configuration. Exist
mise permits untrusted local configuration to override default shell arguments
CVE-2026-103929
## Summary Untrusted local .mise.toml [settings] can set the shell interpreter args (unix/windows default_inline / defa
Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly...
CVE-2026-107795
Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative author
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102860
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a networ
A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/inc_front/content/cnt23.article.inc.php of the comp...
CVE-2026-110025
A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file in
A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to informatio...
CVE-2026-109526
A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component e
slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload
CVE-2026-110025
A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file in
HBAI-Ltd Toonflow-app exportData Endpoint information disclosure
CVE-2026-109526
A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component e
A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move_uploaded_file of the file admin/add_admin.php. ...
CVE-2026-108975
A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the func
A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file /classes/Users.php?f=save. Such manipulation of the argu...
CVE-2026-108974
A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file
A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file /classes/Users.php?f=save. Thi...
CVE-2026-108973
A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move
Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permissions that allows any authenticated non-guest user to cre...
CVE-2023-54412
Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permis
Convex is an open-source reactive database for application developers. Prior to the self-hosted image published on August 10, 2026 and local deployment binary precompiled-2026-0...
CVE-2026-97691
Convex is an open-source reactive database for application developers. Prior to the self-hosted image published on Augus
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintend...
CVE-2026-18517
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Loca
A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddns_wan_list_show of the file ddns_wan_list_show.cgi of the component DDNS Hand...
CVE-2026-108930
A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddns_wan_list_show of t