#cwe-78

共收录 1648 条相关情报。

← 返回所有主题

漏洞预警2026-05-27 发布INFO

Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is started in REST API server mode (dalfox server), the server binds...

CVE-2026-45087

Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is started

历史摘要 · 未重新核验 · NVD

#cve #cwe-15 #cwe-78 #cwe-306

漏洞预警2026-05-27 发布INFO

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, a malicious bentofile.yaml containing a newline-injec...

CVE-2026-44346

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-94

漏洞预警2026-05-27 发布INFO

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, src/bentoml/_internal/container/frontend/dockerfile/t...

CVE-2026-44345

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-05-27 发布INFO

A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration va...

CVE-2026-40852

A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. T

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-05-27 发布INFO

HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file(). send_file() opens its string argument with Perl's 2-arg open(). The 2-arg form interprets...

CVE-2026-8450

HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file(). send_file() opens its string arg

历史摘要 · 未重新核验 · NVD

#cve #cwe-73 #cwe-78

安全公告2026-05-27 发布INFO

Tanium addressed an unauthorized code execution vulnerability in Connect.

CVE-2026-9207

Tanium addressed an unauthorized code execution vulnerability in Connect.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

漏洞预警2026-05-27 发布INFO

Tanium addressed an unauthorized code execution vulnerability in Connect.

CVE-2026-9207

Tanium addressed an unauthorized code execution vulnerability in Connect.

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-05-26 发布INFO

Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the Spindle extension build pipeline calls bun install without the --ignore-scripts flag before running the sta...

CVE-2026-44444

Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the Spindle extension build pipeline calls bun install

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-05-26 发布INFO

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS...

CVE-2026-9560

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:critical

漏洞预警2026-05-26 发布INFO

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC...

CVE-2026-9560

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-267 #cwe-270 #cwe-648

漏洞预警2026-05-26 发布INFO

FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin. The _log() function in src/mikrotik_plugin/f...

CVE-2026-48695

FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integra

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-05-26 发布INFO

FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integration plugin. In src/juniper_plugin/fastnetmon_juniper.ph...

CVE-2026-48694

FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integr

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-26 发布INFO

Twenty is an open source CRM. From 1.7.7 through 1.16.7, a critical Remote Code Execution (RCE) vulnerability exists in Twenty CRM via a chained SQL Injection and PostgreSQL COP...

CVE-2026-46624

Twenty is an open source CRM. From 1.7.7 through 1.16.7, a critical Remote Code Execution (RCE) vulnerability exists in

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-89

漏洞预警2026-05-26 发布INFO

A vulnerability was determined in haojing8312 WorkClaw up to 0.6.4. This affects the function is_dangerous of the file apps/runtime/src-tauri/src/agent/tools/bash.rs of the comp...

CVE-2026-9565

A vulnerability was determined in haojing8312 WorkClaw up to 0.6.4. This affects the function is_dangerous of the file a

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-26 发布INFO

Vowpal Wabbit is a machine learning system. The workflow .github/workflows/python_checks.yml embeds ${{ github.event.pull_request.title }} directly inside double-quoted bash str...

CVE-2026-44723

Vowpal Wabbit is a machine learning system. The workflow .github/workflows/python_checks.yml embeds ${{ github.event.pul

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-1336

漏洞预警2026-05-26 发布INFO

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%...

CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the comma

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-05-26 发布INFO

A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management I...

CVE-2026-9543

A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-26 发布INFO

A flaw has been found in Totolink CA750-PoE 6.2c.510. This affects the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Executing a m...

CVE-2026-9534

A flaw has been found in Totolink CA750-PoE 6.2c.510. This affects the function setWiFiWpsConfig of the file /cgi-bin/cs

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-26 发布INFO

A vulnerability was detected in Totolink CA750-PoE 6.2c.510. The impacted element is the function recvUpgradeNewFw of the file /cgi-bin/cstecgi.cgi of the component Setting Hand...

CVE-2026-9533

A vulnerability was detected in Totolink CA750-PoE 6.2c.510. The impacted element is the function recvUpgradeNewFw of th

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-26 发布INFO

A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510. The affected element is the function setUploadUserData of the file /cgi-bin/cstecgi.cgi of the compone...

CVE-2026-9532

A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510. The affected element is the function setUploa

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78