共收录 215 条相关情报。
← 返回所有主题CVE-2026-45181
Hex-Rays IDA Pro 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation (via argument injection), whi
CVE-2026-42601
ArchiveBox is an open source self-hosted web archiving system. In versions 0.8.6rc0 and prior, the /add/ endpoint (AddVi
CVE-2026-43943
### Impact A code execution (RCE) vulnerability exists in electerm's SFTP open with system editor or "Edit with custom
CVE-2026-43941
### Impact Electerm's terminal hyperlink handler passes any URL clicked in the terminal directly to `shell.openExternal
CVE-2026-41570
PHPUnit is a testing framework for PHP. In versions 12.5.21 and 13.1.5, PHPUnit forwards PHP INI settings to child proce
CVE-2026-43943
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code
CVE-2026-43941
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior,
CVE-2026-42284
GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_
CVE-2026-40281
Gotenberg is a Docker-powered stateless API for PDF files. In versions 8.30.1 and earlier, the metadata write endpoint v
CVE-2026-42266
The allow-list of extensions that can be installed from PyPI Extension Manager (`allowed_extensions_uris`) is not correc
CVE-2026-43893
### Impact `exiftool-vendored` starts ExifTool in `-stay_open True -@ -` mode, where arguments are read from stdin one
CVE-2026-7865
A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argume
CVE-2026-42601
The /add/ endpoint (AddView in core/views.py) accepts a config JSON field that gets merged into the crawl config without
CVE-2026-7725
A vulnerability was found in PrefectHQ prefect up to 3.6.25.dev6. Affected by this issue is some unknown functionality o
CVE-2026-40281
## Vulnerability Details **CWE**: CWE-20 - Improper Input Validation The metadata value sanitization introduced in v8.