Shopper: Multiple data integrity and disclosure issues in admin Livewire components
CVE-2026-47743
## Impact Three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and sto
#severity:high
共收录 5509 条相关情报。
← 返回所有主题TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection
CVE-2026-47761
### Impact Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via crafted `data-mce-*`
TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments
CVE-2026-47762
### Impact Stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass sanitization and injec
TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes
CVE-2026-47759
### Impact Stored XSS vulnerability via unsanitized data-mce-* attributes (data-mce-href, data-mce-src, data-mce-style).
TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs
CVE-2026-47760
### Impact TinyMCE 6.8.x contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer.
skillctl: Path traversal and symlink-follow in skillctl allow arbitrary file disclosure and deletion
## Impact `skillctl` 0.1.0 and 0.1.1 contained four path-safety vulnerabilities that, in combination, allowed an attack
Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS(),...
CVE-2026-49493
Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS(), which evaluates the block
Markdown Preview Enhanced before 0.8.28 parses WaveDrom diagrams by evaluating untrusted markdown...
CVE-2026-50733
Markdown Preview Enhanced before 0.8.28 parses WaveDrom diagrams by evaluating untrusted markdown content with eval(), a
On affected platforms with hardware IPSec support running Arista EOS with certain IPsec features...
CVE-2026-2379
On affected platforms with hardware IPSec support running Arista EOS with certain IPsec features enabled, EOS may exhibi
A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2...
CVE-2026-8714
A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling
Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a...
CVE-2026-49492
Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not val
In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed...
CVE-2025-5089
In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from t
An authenticated Redis session could be used to obtain full root access to all servers in the CVX...
CVE-2025-5088
An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster. Note that thi
CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes...
CVE-2025-5090
CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instabil
Klever-Go KVM: Unauthenticated remote node crash (nil-pointer DoS) in klever-go P2P transaction interceptor (txVersionChecker nil RawData) - potential chain halt
## Summary Every transaction gossiped on the klever-go P2P network is decoded and validated synchronously inside the lib
klever-go: REST API slow-header connection exhaustion via Gin Engine.Run
### Summary The Klever seednode REST API starts a Gin engine with `Engine.Run(restAPIInterface)`. In Gin v1.9.1, `Engin
klever-go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS
### Summary `networkMessenger.directMessageHandler` in `network/p2p/libp2p/netMessenger.go` spawns a fresh goroutine fo
DbGate: Remote Code Execution via functionName injection in loadReader endpoint
CVE-2026-48017
### Summary The `POST /runners/load-reader` endpoint in DbGate accepts a `functionName` parameter that is directly inte
Sync-in Server: SSRF protection bypass via IPv4-mapped IPv6 addresses in regExpPrivateIP
CVE-2026-47684
Summary: The private IP blocklist regex used in the URL download feature does not match IPv4-mapped IPv6 addresses (e.g.
praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDOR
CVE-2026-47419
## Summary **Type:** Insecure Direct Object Reference. The agent CRUD endpoints (`GET / PATCH / DELETE /workspaces/{wor