LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy
CVE-2025-59953
### Description The LMdeploy implements an rpc server (AsyncRPCServer in zmq_rpc.py) for supporting the RPC communicati
#severity:critical
共收录 1449 条相关情报。
← 返回所有主题@zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover
CVE-2026-61560
### Summary The SSE transport mode (`SSE=true`) exposes all MCP tools without any authentication. The `upload_markdown`
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret...
CVE-2026-15640
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.
An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's...
CVE-2026-15639
An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScrip
An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt...
CVE-2026-15638
An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using on
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller...
CVE-2026-78225
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS
A hardcoded cryptographic client authentication key vulnerability exists in the robot testing...
CVE-2026-81855
A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wär
The mySCADA myPRO Manager command API does not properly enforce authentication for privileged...
CVE-2026-73807
The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthentica
Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without...
CVE-2026-91939
Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes restriction, allowing
Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...
CVE-2026-91749
Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbit
Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...
CVE-2026-91728
Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code insid
@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery
CVE-2026-61559
# Server-Side Request Forgery via X-GitLab-API-URL Header Allows Credential Theft ## Affected - **Repository:** `zerei
@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport
CVE-2026-61568
`@zereight/mcp-gitlab` exposes its Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicio
Http4s Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)
CVE-2026-69204
## Summary Ember's HTTP/1.1 request parser does not reject a message that carries both a `Transfer-Encoding` and a `Con
ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade
CVE-2026-59178
## Summary The dashboard reads its authentication credentials from `$ESPHOME_USERNAME` and `$ESPHOME_PASSWORD`. Earlier
GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2...
CVE-2026-87719
GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2 before 19.2.6, and 19.3
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19...
CVE-2026-85706
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 1
An example environment-configuration file for a bundled inventory-management component ships with...
CVE-2026-90456
An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-know
yayson: Prototype pollution in Store/LegacyStore deserialization
CVE-2026-61534
# Summary `Store`/`LegacyStore` key internal lookup tables by the `type`, `id`, and relationship names from a JSON:API d
Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover
CVE-2026-59151
## SAML Tenant Binding Enables Cross-Tenant Account Takeover ### Summary Prowler's SAML authentication flow trusted th