meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token
CVE-2026-54547
## X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token ### Summary `AuthInjectionMiddleware` in `meta-ads-
#severity:high
共收录 5441 条相关情报。
← 返回所有主题meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch
CVE-2026-54549
## Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch ### Summary The `upload_
sh _uid does not drop supplementary groups (incomplete privilege drop)
CVE-2026-54552
### Impact The `_uid` option performed an incomplete privilege drop on Linux/Unix-like systems. When `sh` was run from
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
CVE-2026-11400
Aurora PostgreSQL is a fully managed relational database engine that's compatible with PostgreSQL. The team has identif
An unauthenticated reflected cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox...
CVE-2026-9585
An unauthenticated reflected cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition version 8.
A stored cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition 8.3 ...
CVE-2026-9588
A stored cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997) within the voicem
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution...
CVE-2026-9762
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under u
An authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3 ...
CVE-2026-9587
An authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The play_file
Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows...
CVE-2026-63101
Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers t
ForgeCode (tailcallhq/forgecode), an AI pair-programming CLI, automatically loads and executes...
CVE-2026-57860
ForgeCode (tailcallhq/forgecode), an AI pair-programming CLI, automatically loads and executes the MCP servers defined i
Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api...
CVE-2026-63307
Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api/connection/datasource/{i
Maybe through 0.6.0 contains a missing authorization vulnerability that allows authenticated low...
CVE-2026-63100
Maybe through 0.6.0 contains a missing authorization vulnerability that allows authenticated low-privilege member-role u
Missing authentication for critical function vulnerability in Vimesoft Inc. Enterprise Video...
CVE-2026-12691
Missing authentication for critical function vulnerability in Vimesoft Inc. Enterprise Video Platform allows Authenticat
TheHive through 4.1.24 contains a broken object-level authorization vulnerability in the...
CVE-2026-63099
TheHive through 4.1.24 contains a broken object-level authorization vulnerability in the attachment download endpoints t
osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization (BOLA) leading...
CVE-2026-14871
osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization (BOLA) leading to Insecure Direct Obje
vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends
CVE-2026-55574
## Summary The `structured_outputs.regex` API parameter passes a user-supplied regex string directly to grammar compile
vLLM has Remote DoS via Invalid Recovered Token Reinjection
CVE-2026-54234
## Summary A frontend-legal multi-request speculative workload can make vLLM produce an out-of-vocabulary recovered tok
The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 shipped Access-Control-Allow...
CVE-2026-62387
The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 shipped Access-Control-Allow-Origin: * as its default C
The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT access tokens...
CVE-2026-62386
The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT access tokens through the ?token= URL query
OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint...
CVE-2026-62238
OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint