gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl...
CVE-2026-82286
gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl endpoint, allowing unauthent
#severity:high
共收录 5383 条相关情报。
← 返回所有主题Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the ...
CVE-2026-82288
Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint
Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing...
CVE-2026-82282
Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to acce
BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow run_once...
CVE-2026-82278
BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow run_once endpoint that allows authen
Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the document parser that...
CVE-2026-82275
Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the document parser that fails to restrict file acc
Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances
CVE-2026-55761
## Summary Portainer supports restoring an instance from a backup archive via the /api/restore endpoint. This endpoint i
klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits
CVE-2026-55763
## Summary In `processPercentageRoyaltiesTransfer` the royalty pool is collected from the sender by `SubFromBalance` tha
alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server
CVE-2026-55484
### Summary A single unauthenticated HTTP request to a path starting with `?` (e.g. `GET ? HTTP/1.1`) crashes the entire
Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation
CVE-2026-55212
### Summary The Studio API class definition creation endpoint in `pimcore/studio-backend-bundle` is guarded by the `obje
Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes
CVE-2026-55208
## Summary An authenticated user extracts the admin password hash and any other database content through a time-based b
Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass
CVE-2026-55207
## Summary An unauthenticated attacker takes over any Pimcore admin account by sending a password reset request with an
Crossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature check
## Summary Crossplane allows package signature verification to be configured via the `ImageConfig` mechanism. When enab
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
CVE-2026-54718
### Impact The advanced workflow email template field is vulnerable to a specially crafted payload that can be used to r
silverstripe/userforms vulnerable to remote code execution via userforms email subject
CVE-2026-54721
### Impact The userform email subject field in the CMS is vulnerable to a specially crafted payload being used to run ar
Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations...
CVE-2026-47879
Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto de
Spring Data REST does not guard identifier (@Id) and version (@Version) properties against...
CVE-2026-47849
Spring Data REST does not guard identifier (@Id) and version (@Version) properties against mutation via RFC 6902 JSON Pa
Spring Security Authorization Server's default consent page renders user-controlled values...
CVE-2026-47877
Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding.
In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward...
CVE-2026-80588
In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path
In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fb_info->mode...
CVE-2026-80579
In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fb_info->mode before deleting a videom
In the Linux kernel, the following vulnerability has been resolved: fbdev: core: Fix pointer...
CVE-2026-80578
In the Linux kernel, the following vulnerability has been resolved: fbdev: core: Fix pointer desynchronization in fb_io