Better Auth has an account takeover issue via OAuth auto-link to unverified pre-registered email
CVE-2026-53516
### Am I affected? Users are affected if all of the following are true: - Their application uses `better-auth` at a ve
#severity:high
共收录 5441 条相关情报。
← 返回所有主题Better Auth vulnerable to unauthorized invitation acceptance via unverified email match in organization plugin
CVE-2026-53514
### Am I affected? Users are affected if all of the following are true: - Their application uses `better-auth` with th
uutils coreutils: cp/install/mv/ln --suffix alone does not enable backup mode (silent data loss vs GNU)
`determine_backup_mode` in `src/uucore/src/lib/features/backup_control.rs` only checks `--backup`/`-b` and returns `Back
MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys...
CVE-2026-57851
MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allo
Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the...
CVE-2026-23698
Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import featur
AWS Research and Engineering Studio (RES) is an open-source solution that enables researchers and...
CVE-2026-14904
AWS Research and Engineering Studio (RES) is an open-source solution that enables researchers and engineers to create an
Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low...
CVE-2026-23697
Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve
A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS...
CVE-2026-13020
A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on
Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages
CVE-2026-26193
### Summary Manually modifying chat history allows setting the `embeds` property on a response message, the content of w
Open WebUI vulnerable to Stored XSS via iFrame in citations model
CVE-2026-26192
### Summary Manually modifying chat history allows setting the `html` property within document metadata. This causes the
Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions
CVE-2025-46719
### Summary A vulnerability in the way certain html tags in chat messages are rendered allows attackers to inject JavaS
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Arbitrary File...
CVE-2026-6101
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Arbitrary File Write in versions up to a
mkfifo: permissions of an existing file are changed after FIFO creation fails
CVE-2026-35341
When `mkfifo()` fails (e.g. target already exists), the code shows an error but is missing a `continue;`, so it falls th
Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write
### Summary `agentConn.apiClient()` used the default redirect behavior of `http.Client` while its custom transport dial
OpenRemote has Authenticated SQL Injection via Datapoint Crosstab Export
## Summary The datapoint export API builds a PostgreSQL crosstab export query by concatenating asset display names into
9router: Login brute-force protection bypass via spoofed X-Forwarded-For header
CVE-2026-55501
## Summary The 9router dashboard login rate limiter derives the client identity from the attacker-controlled `X-Forward
Craft CMS: Potential authenticated Remote Code Execution via referrer redirect
CVE-2026-55794
### Requirements: * Control panel access * Permissions to edit an entry ### Details Control panel users with the abil
Leantime contains an OIDC login CSRF vulnerability in the verifyState() method that...
CVE-2026-59713
Leantime contains an OIDC login CSRF vulnerability in the verifyState() method that unconditionally returns true without
Leantime's Users::getUser method in the JSON-RPC API lacks proper authorization checks, allowing...
CVE-2026-59712
Leantime's Users::getUser method in the JSON-RPC API lacks proper authorization checks, allowing authenticated users to
A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14...
CVE-2026-55727
A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14.0.0 prior to build 5.14