DB-GPT builds the destination path for an uploaded skill from the multipart filename without...
CVE-2026-80104
DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the uplo
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution
CVE-2026-45018
### Am I affected? Only if your deployment sets `features.mcp.enabled = true` in `.chainlit/config.toml`. **MCP has bee
AshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching
CVE-2026-49757
### Summary AshAuthentication's OAuth2 and OIDC family strategies matched the local user by email address rather than b
gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads
CVE-2026-48853
### Summary `GRPC.Codec.Erlpack.decode/2` calls `:erlang.binary_to_term/1` directly on the raw gRPC message body withou
Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions.
CVE-2026-78262
Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions.
Unauthenticated SQL Injection in Boost <= 2.0.4 versions.
CVE-2026-32555
Unauthenticated SQL Injection in Boost <= 2.0.4 versions.
Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.
CVE-2026-32559
Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.
Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.
CVE-2026-78265
Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.
CVE-2026-32554
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.
Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63...
CVE-2026-32563
Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
CVE-2026-78267
Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys...
CVE-2026-78555
RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page. Althoug
OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may...
CVE-2026-76835
OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, b
justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant...
CVE-2026-8445
justhtml versions are preserved, so untrusted input that is safe in to_html() — including entity-decoded text (e.g. <
justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active...
CVE-2026-7808
justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g.,
justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers ...
CVE-2026-5388
justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_st
privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to...
CVE-2026-78155
privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privi
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
CVE-2026-77415
Before JSONata `2.2.1` and `1.8.8` it was possible to execute arbitrary code with crafted expressions, due to: - overwri
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
CVE-2026-77414
Before JSONata `2.2.1` and `1.8.8` it was possible to execute arbitrary code with crafted expressions, due to a bypassab
JSONata: Arbitrary Code Execution via crafted JSONata expressions
CVE-2026-77413
## Impact Before JSONata `2.2.0` and `1.8.8` it was possible to execute arbitrary code with crafted expressions, due to