共收录 381 条相关情报。
← 返回所有主题CVE-2026-47377
NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, the client-side hashRedirect plugin calle
CVE-2026-56697
Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 accept protocol-relative paths such as //evil.com in the reloadNu
CVE-2026-56697
Nuxt 框架（版本 4.0.0 至 4.4.7 之前，以及 3.x 至 3.21.7 之前）中的 reloadNuxtApp 函数存在一个安全漏洞，该函数在处理协议相对路径（如 //evil.com）时未能正确验证。具体而言，攻击者可以构
CVE-2026-56326
Nuxt（Vue.js 框架）的 navigateTo 函数在版本 4.0.0 至 4.4.7 之前以及 3.x 至 3.21.7 之前存在一个服务端开放重定向漏洞。该漏洞源于 navigateTo 对经过路径规范化后的 payload 验
CVE-2026-44889
WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header d
CVE-2026-41479
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.10 and 1.7.1, Authlib's OAuth 2.
CVE-2026-12863
An unvalidated redirect was contained in Venueless' social login functionality and could be exploited for phishing using
CVE-2026-12804
A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-p
CVE-2026-12804
A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-p
CVE-2026-56330
Capgo before 12.128.2 contains an open redirect vulnerability in stripe_portal and stripe_checkout endpoints that accept
CVE-2026-56332
Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that allows attackers to re
CVE-2026-56332
Capgo 存在开放重定向漏洞，影响版本 12.128.2 之前。该漏洞位于 confirm-signup 端点，因为 confirmation_url 参数未经过有效验证，攻击者可构造恶意链接，将用户重定向到任意外部网站。这种漏洞常被用于
CVE-2026-56330
Capgo 版本低于 12.128.2 存在开放重定向漏洞，影响 stripe_portal 和 stripe_checkout 端点。这些端点接受未经验证的 callbackUrl、successUrl 和 cancelUrl 参数，允许
CVE-2026-47645
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized atta
CVE-2026-47645
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized atta
CVE-2026-55185
### Summary The URL restrictions in `miniflux-v2` can be bypassed by attackers, leading to an open redirect vulnerabilit
CVE-2026-55660
TinaCMS registers window message listeners — the useTina overlay handler, the OAuth authentication popup handler, and th
CVE-2026-12622
The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission. This issu
CVE-2026-48895
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX. The attacker could manipulate some
CVE-2026-44915
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX. The default configuration of cas-au