共收录 381 条相关情报。
← 返回所有主题CVE-2026-107020
An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers
CVE-2026-118425
A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an identity and access management solut
CVE-2026-116578
### Summary `tornado.web.RedirectHandler` builds its target URL by substituting parts of the request path into a templa
CVE-2026-118658
Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarded-Proto, X-Forwarded
CVE-2026-118656
Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target
CVE-2026-111031
The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in a redirec
CVE-2026-117553
Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attacke
CVE-2026-116578
Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, tornado.web.RedirectHandler URL tem
CVE-2026-114060
### Impact Applications using enhanced form actions (`use:enhance`) on routes that accept paths beginning with `//`, suc
CVE-2026-115537
A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This af
CVE-2026-114614
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.securit
CVE-2026-87945
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the
CVE-2026-87937
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server a
CVE-2026-87945
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the
CVE-2026-87937
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server a
CVE-2026-87937
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server a
CVE-2026-87945
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the
CVE-2024-4989
The callback URL parameter in WSO2 API Manager fails to validate user-supplied input, allowing it to be controlled by ma
CVE-2026-114060
SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form actions (use:enhance) on
CVE-2026-114060
SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form actions (use:enhance) on