共收录 1981 条相关情报。
← 返回所有主题CVE-2026-19837
A weakness has been identified in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /admin/customers/
CVE-2026-19835
A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality
CVE-2026-72837
File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-pro
CVE-2026-73664
FreePBX is an open source IP PBX. From 17.0.5.34 until 17.0.11, the publicKeySave AJAX endpoint in Backup.class.php acce
CVE-2026-59763
Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads
CVE-2026-58508
Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)
CVE-2026-58507
Private Repository Existence Disclosure via go-get Meta Endpoint
CVE-2026-58440
Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of pr
CVE-2026-58439
Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag
CVE-2026-58437
Repository Visibility Manipulation via Git Push Options
CVE-2026-58429
Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints
CVE-2026-58420
Local File Inclusion via file:// URI in Migration Restore
CVE-2026-58417
REST API exposes organization membership of private organizations to public
CVE-2026-56755
Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload
CVE-2026-56750
Gitea Remember-Me Token Theft Not Invalidating Attacker Session
CVE-2026-56657
Gitea SSH Key Parser Denial of Service
CVE-2026-56654
Privilege Escalation via Access Token Scope Escalation in API
CVE-2026-55986
Email Management API Bypasses ManageCredentials Feature Restrictions
CVE-2026-55984
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service
CVE-2026-58508
Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)