sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)
CVE-2026-45091
In sealed-env enterprise mode, versions 0.1.0-alpha.1 through 0.1.0-alpha.3 embedded the operator's literal TOTP secret
#severity:critical
共收录 1443 条相关情报。
← 返回所有主题Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via `found-action`
CVE-2026-45087
# GHSA: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode ## Summary When dalfox is start
Due to improper Spring Security configuration, SAP Commerce cloud allows an unauthenticated user...
CVE-2026-34263
Due to improper Spring Security configuration, SAP Commerce cloud allows an unauthenticated user to perform malicious co
SAP S/4HANA (SAP Enterprise Search for ABAP) contains a SQL injection vulnerability that allows...
CVE-2026-34260
SAP S/4HANA (SAP Enterprise Search for ABAP) contains a SQL injection vulnerability that allows an authenticated attacke
Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
CVE-2026-45321
## Summary On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 `@tanstack/*` pack
SandboxJS has a sandbox escape via Function.caller leakage of internal call op
CVE-2026-43898
### Summary Sandbox-defined functions expose `Function.caller`, allowing sandboxed code to recover the internal `LispTyp
Unity Catalog has a JWT Issuer Validation Bypass tht Allows Complete User Impersonation
CVE-2026-27478
**Context:** A critical authentication bypass vulnerability exists in the Unity Catalog token exchange endpoint (/api/1.
WebdriverIO BrowserStack Service has a Command Injection issue
CVE-2026-25244
### Summary A command injection vulnerability exists in `@wdio/browserstack-service` that allows remote code execution (
torrentpier has PHP Serialize Injections
### Summary Hi, there. We've found PHP Serialize Injections in your project “torrentpier". According to the OWASP, it ca
WordPress TheCartPress 1.5.3.6 contains an unauthenticated privilege escalation vulnerability...
CVE-2021-47932
WordPress TheCartPress 1.5.3.6 contains an unauthenticated privilege escalation vulnerability that allows attackers to c
WordPress Plugin Download From Files version 1.48 and earlier contains an arbitrary file upload...
CVE-2021-47940
WordPress Plugin Download From Files version 1.48 and earlier contains an arbitrary file upload vulnerability that allow
OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauthenticated...
CVE-2021-47936
OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary
WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows...
CVE-2021-47933
WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to uplo
OpenCart 3.0.3.8 contains a session fixation vulnerability that allows attackers to hijack user...
CVE-2021-47923
OpenCart 3.0.3.8 contains a session fixation vulnerability that allows attackers to hijack user sessions by injecting ar
@profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module
Security Advisory: OS Command Injection in profullstack/mcp-server domain_lookup Module Field | Value -- | -- Project
Snipe-IT has insecure permissions in file uploads
CVE-2026-37709
Insecure Permissions vulnerability in grokability snipe-it versions through 8.4.0, fixed after 2026-03-10 commit 676a995
free5GC's NEF nnef-pfdmanagement API is unauthenticated; forged bearer tokens can read PFD data and create/delete PFD subscriptions
CVE-2026-44330
### Summary free5GC's NEF mounts the `nnef-pfdmanagement` route group without inbound OAuth2/bearer-token authorization.
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers
CVE-2026-44329
### Summary free5GC's SMF mounts the `UPI` management route group without OAuth2/bearer-token authorization middleware.
free5GC's NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler
CVE-2026-44327
### Summary free5GC's NEF mounts the `nnef-oam` route group without inbound OAuth2/bearer-token authorization. A network
free5GC's NEF 3gpp-traffic-influence API is unauthenticated; missing or forged bearer tokens can create, read, patch, and delete subscriptions
CVE-2026-44326
### Summary free5GC's NEF mounts the `3gpp-traffic-influence` API without inbound OAuth2/bearer-token authorization. A n