Capgo before 12.128.2 allows email address changes without requiring current password re...
CVE-2026-56308
Capgo before 12.128.2 allows email address changes without requiring current password re-authentication or verification
#severity:high
共收录 5441 条相关情报。
← 返回所有主题luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated...
CVE-2026-61875
luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject Jav
OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/sbin/smbd, allowing...
CVE-2026-59260
OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/sbin/smbd, allowing authenticated delegated users t
Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's ...
CVE-2026-56260
Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf end
Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_admin...
CVE-2026-56241
Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_admin users retain access to del
Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server...
CVE-2026-56259
Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to
Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST...
CVE-2026-56238
Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST global_stats endpoint t
A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the...
CVE-2026-15483
A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the fi
A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function...
CVE-2026-15484
A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub_41EC14 of the file
A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability...
CVE-2026-15481
A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects the function ipoa_t
A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function...
CVE-2026-15480
A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /
Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized...
CVE-2026-58281
Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ove
PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the...
CVE-2026-61429
PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend th
The Grav Admin2 plugin (getgrav/grav-plugin-admin2) before 2.0.4 embeds a global JavaScript...
CVE-2026-61454
The Grav Admin2 plugin (getgrav/grav-plugin-admin2) before 2.0.4 embeds a global JavaScript variable window.__GRAV_CONFI
PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces...
CVE-2026-61426
PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requireme
PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization...
CVE-2026-61442
PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization on the PATCH routes for
PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the...
CVE-2026-61439
PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults
Capgo before 12.128.2 contains an information disclosure vulnerability in the...
CVE-2026-56303
Capgo before 12.128.2 contains an information disclosure vulnerability in the find_apikey_by_value PostgreSQL function m
The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up...
CVE-2026-9282
The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.4
The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-6939
The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'app