Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker...
CVE-2026-27690
Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially craf
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability...
CVE-2026-62327
9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote attack
9Router through version 0.4.41 contains an unauthenticated access vulnerability that allows...
CVE-2026-59801
9Router through version 0.4.41 contains an unauthenticated access vulnerability that allows remote attackers to interact
Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover
CVE-2026-52824
### Summary The official Kimai Docker image ships with `APP_SECRET=change_this_to_something_unique` as the default envi
FacturaScripts: Account takeover of any 2FA-enabled user
CVE-2026-47677
# Authentication bypass in FacturaScripts: `/login?action=two-factor-validation` accepts brute-forceable TOTP without pa
DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval
CVE-2026-61667
### Summary The FileCatalog DatasetManager runs a query on the database and passes the result to eval. The SQL query con
DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input
CVE-2026-45579
### Summary An remote code execution vulnerability exists in RequestManager due to the use of eval on untrusted input th
Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT...
CVE-2026-56271
Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refr
LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables,...
CVE-2026-61876
LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent networ
PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the...
CVE-2026-60090
PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowled
PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in...
CVE-2026-61445
PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due
PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent...
CVE-2026-61447
PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-
The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that...
CVE-2026-57828
The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered user
The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that...
CVE-2026-57827
The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable
The charging station websocket endpoint accepts connections without proper authentication, which...
CVE-2026-20744
The charging station websocket endpoint accepts connections without proper authentication, which could lead to privileg
TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation
## Description A vulnerability was discovered in TSDProxy where it forwards its internal per-process authentication tok
Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security...
CVE-2026-57807
Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security Software Pvt Ltd. OAuth Si
The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for...
CVE-2026-12761
The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to auth
MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured...
CVE-2026-61459
MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubect
Improper neutralization of special elements used in an SQL command ('SQL injection')...
CVE-2026-5801
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Semtek Informatics