#cwe-74

共收录 1605 条相关情报。

← 返回所有主题
漏洞预警2026-08-08 发布INFO

A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of the component review-git...

CVE-2026-19266

A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-08 发布INFO

A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. The impacted element is an unknown function of the file mcp-bridge.js of t...

CVE-2026-19263

A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. The impacted elem

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布HIGH

Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, `autorestore.kak` script can be exploited by malicious backup files leading to arbitrary ...

CVE-2026-48120

CVE-2026-48120 是影响 Kakoune 代码编辑器(2026.05.21 之前版本)的一个高危漏洞。Kakoune 默认启用并捆绑了 autorestore.kak 脚本,该脚本用于在编辑器启动时自动恢复上次会话的备份文件。攻

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This...

CVE-2026-19231

A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=delete_ap...

CVE-2026-19231

A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown...

CVE-2026-19211

A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /socia

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /social/ajax.php?action=signup. Performing a manipulation of th...

CVE-2026-19211

A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /socia

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE)

## Summary GitPython's config-name validator only neutralizes CR/LF/NUL for the `"option"` label; it does not reject `=`

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

A vulnerability was found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=login. The manipulation of t...

CVE-2026-19196

A vulnerability was found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewappointment.php. This manipulation of the argument delid c...

CVE-2026-19071

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A vulnerability was detected in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewadmin.php. The manipulation of the argument delid ...

CVE-2026-19070

A vulnerability was detected in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrecord.php. The manipulation of...

CVE-2026-19069

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown funct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /treatmentdetail.php. Executing a manipula...

CVE-2026-19068

A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown functi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /treatment.php. Performing a manipula...

CVE-2026-19067

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipula...

CVE-2026-19062

A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unkn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulation leads to code injection. The attack needs to be perfo...

CVE-2026-19060

A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter of the file metagpt/roles/di/data_interpreter.py. The man...

CVE-2026-19058

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The Ninja Forms WordPress plugin before 3.14.10 does not prevent user-supplied query-string input, used to pre-populate a form field's default value, from being processed as a s...

CVE-2026-15256

The Ninja Forms WordPress plugin before 3.14.10 does not prevent user-supplied query-string input, used to pre-populate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the CSS scrubber in rrrene html_sanitize_ex allows an unauthe...

CVE-2026-68747

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24. This affects the function executeArbitraryCommand/executeCommand of the file src/ludusMCP/cliWrapper.ts of t...

CVE-2026-19047

A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24. This affects the function executeArbitraryCommand/e

历史摘要 · 未重新核验 · NVD