Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites
CVE-2026-114125
**Summary:** A malicious website may be able to cause unauthorized file changes in a developer’s project while an affect
#cwe-96
共收录 6 条相关情报。
← 返回所有主题A flaw was found in the Ansible Automation Platform automation controller. The external logging ...
CVE-2026-85475
A flaw was found in the Ansible Automation Platform automation controller. The external logging (rsyslog) configuration
A flaw was found in the Ansible Automation Platform automation controller. The external logging (rsyslog) configuration is generated by interpolating user-controlled settings — ...
CVE-2026-85475
A flaw was found in the Ansible Automation Platform automation controller. The external logging (rsyslog) configuration
Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom e...
CVE-2026-68489
Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authentic
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before...
CVE-2026-86218
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
CVE-2026-86218
N-central 存在一个严重的预认证远程代码执行（Pre-Auth RCE）漏洞。该漏洞影响 N-central 2026.3.1.14 之前的版本。由于攻击者无需任何身份验证即可触发该漏洞，一旦被成功利用，攻击者能够在目标服务器上执行