YesWiki: SQL Injection possible through public Bazar entry-listing APIs via numeric `query`/`queries` filters
CVE-2026-52770
### Summary YesWiki’s public Bazar entry-listing APIs are vulnerable to unauthenticated SQL injection in numeric `query`
#severity:high
共收录 5441 条相关情报。
← 返回所有主题YesWiki has Unauthenticated Server-Side Request Forgery via ActivityPub `Signature.keyId`
CVE-2026-52769
## Summary The `POST /api/forms/{formId}/actor/inbox` route - exposed publicly with `acl:"public"` - accepts an HTTP `Si
YesWiki Vulnerable to Unauthenticated ActivityPub Signature-Verification Bypass via `!openssl_verify(...)` accepting `int(-1)`
CVE-2026-52767
## Summary `HttpSignatureService::verifySignature()` checks the result of PHP's `openssl_verify()` with a **loose boolea
YesWiki: Authenticated (Admin) Server-Side Template Injection to Remote Code Execution via Bazar Semantic Templates
CVE-2026-52762
### Summary YesWiki Bazar contains a stored Server-Side Template Injection (`SSTI`) vulnerability in the semantic templa
laravel-backup-restore has an OS Command Injection during database restore
CVE-2026-53932
## Summary A crafted backup archive can trigger OS command injection during database restore. The restore workflow extra
A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME...
CVE-2026-10037
A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by th
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-58525
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature
Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the...
CVE-2026-60105
Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteFile action caused by an
GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 before 18.11.7, 19...
CVE-2026-6896
GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 before 18.11.7, 19.0 before 19.0.4, and 19
Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of...
CVE-2026-0288
Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 18.11.7,...
CVE-2026-13320
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 18.11.7, 19.0 before 19.0.4, and
DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of...
CVE-2026-15167
DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
Bitwarden Server before 2026.6.0 does not verify that the email in a POST /auth-requests/admin...
CVE-2026-60104
Bitwarden Server before 2026.6.0 does not verify that the email in a POST /auth-requests/admin-request body belongs to t
Composio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that allows...
CVE-2026-59807
Composio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that allows attackers to read and ex
rpcx through 1.9.3, fixed in commit 047aec1, contains a denial-of-service vulnerability in...
CVE-2026-59803
rpcx through 1.9.3, fixed in commit 047aec1, contains a denial-of-service vulnerability in protocol.Message.Decode (prot
Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contains a missing authentication...
CVE-2026-59804
Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contains a missing authentication and CORS misconfigurat
Gumroad before 2026.07.06.2 contains a broken access control vulnerability in the...
CVE-2026-59805
Gumroad before 2026.07.06.2 contains a broken access control vulnerability in the PurchasesController that allows authen
HashiCorp Nomad and Nomad Enterprise are vulnerable to a sandbox escape in the Docker task driver...
CVE-2026-14891
HashiCorp Nomad and Nomad Enterprise are vulnerable to a sandbox escape in the Docker task driver that may allow a job s
HashiCorp Nomad and Nomad Enterprise did not enforce the allow_privileged restriction for the...
CVE-2026-14373
HashiCorp Nomad and Nomad Enterprise did not enforce the allow_privileged restriction for the Docker task driver's host
Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE
CVE-2026-49471
### Summary Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port (TCP 2428