#severity:high

共收录 5509 条相关情报。

← 返回所有主题
安全公告2026-06-01 发布INFO

praisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace read/update/delete IDOR

CVE-2026-47418

## Summary **Type:** Insecure Direct Object Reference. The project CRUD endpoints (`GET / PATCH / DELETE /workspaces/{w

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-01 发布INFO

DOMPurify XSS via selectedcontent re-clone

CVE-2026-47423

### Summary DOMPurify 3.4.4 allows `selectedcontent` by default, allowing a chain in which browsers "re-clone" an XSS pa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-01 发布INFO

Nezha's authenticated agents can forge service-monitor results for other users' services

CVE-2026-48119

#### Summary Nezha accepts service-monitor `TaskResult` messages from an authenticated agent based only on whether the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-01 发布INFO

@agenticmail/mcp Missing Authentication for Critical Function

# AgenticMail MCP HTTP authorization bypass ## Summary `@agenticmail/mcp` exposes a Streamable HTTP transport when sta

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-01 发布INFO

A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function...

CVE-2026-10206

A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function of the file /dbsrv.asp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function...

CVE-2026-10191

A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function cgiWifiMacFilterSet of the file /bin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the...

CVE-2026-10189

A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the function cgiSysTimeInfoSet of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function...

CVE-2026-10192

A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function set_local_time_0 of the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is...

CVE-2026-10187

A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasic

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

A flaw has been found in Tenda W12 3.0.0.7(4763). This affects the function cgistaKickOff of the...

CVE-2026-10188

A flaw has been found in Tenda W12 3.0.0.7(4763). This affects the function cgistaKickOff of the file /bin/httpd. Execut

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. The affected element is the function...

CVE-2026-10181

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSysCmd of the file /g

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. This affects the function...

CVE-2026-10183

A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. This affects the function formWlanSetup of the file /gofo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

OpenCATS from version 0.9.1a contains an SQL injection vulnerability in DataGrid filter handling...

CVE-2026-49490

OpenCATS from version 0.9.1a contains an SQL injection vulnerability in DataGrid filter handling that allows authenticat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

OpenCATS through 0.9.7.4 contains a sql injection vulnerability in the sortDirection parameter of...

CVE-2026-49489

OpenCATS through 0.9.7.4 contains a sql injection vulnerability in the sortDirection parameter of the DataGrid component

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This issue affects the function...

CVE-2026-10179

A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This issue affects the function formSetWlanEncrypt of the file /go

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

A vulnerability was found in Edimax BR-6478AC 1.23. Impacted is the function formUSBFolder of the...

CVE-2026-10164

A vulnerability was found in Edimax BR-6478AC 1.23. Impacted is the function formUSBFolder of the file /goform/formUSBFo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

A vulnerability has been found in Edimax BR-6478AC 1.23. This issue affects the function...

CVE-2026-10163

A vulnerability has been found in Edimax BR-6478AC 1.23. This issue affects the function formUSBAccount of the file /gof

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

A vulnerability was identified in Edimax BR-6478AC 1.23. The impacted element is the function...

CVE-2026-10165

A vulnerability was identified in Edimax BR-6478AC 1.23. The impacted element is the function formWanTcpipSetup of the f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This vulnerability affects the function...

CVE-2026-10162

A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This vulnerability affects the function formSetPassword of the fil

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-31 发布INFO

A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. This affects the function...

CVE-2026-10161

A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. This affects the function formResetStatistic of the file /g

历史摘要 · 未重新核验 · GitHub Advisory