Goploy: Cross-namespace IDOR and RCE via body-supplied row id in project and project_file handlers
CVE-2026-53552
### Summary `Project.AddFile`, `Project.EditFile`, `Project.RemoveFile`, and `Project.Edit` in `cmd/server/api/project/
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated...
CVE-2026-58473
Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite
LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models...
CVE-2026-59707
LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that al
@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints
CVE-2026-53513
### Am I affected? Users are affected if all of the following are true: - Their application uses `@better-auth/sso` at
Better Auth: OAuth refresh-token replay via missing client authentication on oidc-provider and mcp plugins
CVE-2026-53512
### Am I affected? Users are affected if all of the following are true: - Their application uses `better-auth` and has
Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing...
CVE-2026-13019
Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication for crit
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...
CVE-2026-53481
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...
CVE-2026-53483
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r
9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover
CVE-2026-55500
## Summary The `/api/settings/database` endpoint allows full database export (containing all credentials, API keys, OAu
ArcGIS Server contains a directory traversal vulnerability. An unauthenticated attacker could...
CVE-2026-9181
ArcGIS Server contains a directory traversal vulnerability. An unauthenticated attacker could exploit this issue by sen
Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness
CVE-2026-54496
### Summary A soundness vulnerability in the variable-base scalar multiplication gadget of `halo2_gadgets` allowed a ma
Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-...
CVE-2026-55615
Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type al
9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats
--- title: Unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats product: 9Router version: /
Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent
CVE-2026-54769
### Advisory Details **Title**: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatA
Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls
CVE-2026-54760
# SQLChatAgent `_validate_query` dangerous-pattern regex is bypassable via quoted/commented/qualified function names ##
Decompress: Archive extraction can create files and links outside of the target directory
CVE-2026-53486
### Impact When extracting an archive to a directory, a crafted archive can read or write files outside that directory.
An improper authorization vulnerability in the Plesk XML API allows an authenticated user to...
CVE-2026-48614
An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configurat
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation...
CVE-2026-48316
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could re
An authentication bypass vulnerability exists in the default SFTP server component utilized...
CVE-2026-5268
An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products li
An unauthenticated improper input validation vulnerability in the POST /fetch_cve_data endpoint...
CVE-2026-59509
An unauthenticated improper input validation vulnerability in the POST /fetch_cve_data endpoint in cve-search. A remote