共收录 2015 条相关情报。
← 返回所有主题CVE-2026-68536
Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core. Older unsupported versions may also be affect
CVE-2026-59823
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.9, an authenticated
CVE-2026-92215
A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.g
CVE-2026-92215
A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.g
CVE-2026-92215
A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.g
CVE-2026-92184
A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of th
CVE-2026-92184
A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of th
CVE-2026-92184
A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of th
CVE-2026-61559
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1
CVE-2026-54544
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbou
CVE-2026-61559
# Server-Side Request Forgery via X-GitLab-API-URL Header Allows Credential Theft ## Affected - **Repository:** `zerei
CVE-2026-54544
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbou
CVE-2026-76820
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0
CVE-2026-18424
Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote file import via cross-port reuse of a h
CVE-2026-19504
Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability. This vulnerability allows remote attackers to disclose
CVE-2026-58485
mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through
CVE-2026-55374
canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, Request::buildRequestUr
CVE-2026-54689
mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through
CVE-2026-54688
mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through
CVE-2026-54549
Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, th