Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification
CVE-2026-46717
## Summary nezha's dashboard supports two user roles: `RoleAdmin` (Role==0) and `RoleMember` (Role==1). The notificatio
#severity:high
共收录 5513 条相关情报。
← 返回所有主题aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler
# Vulnerability Description In `aiosend/webhook/base.py`, the `WebhookHandler.feed_update()` method performs full deser
The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in...
CVE-2026-8679
The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including
The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to...
CVE-2026-9011
The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in al
The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable...
CVE-2026-9018
The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation
The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'search_key' parameter...
CVE-2026-4834
The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'search_key' parameter in all versions up to,
A malicious actor with access to the network and low privileges could exploit a Path Traversal...
CVE-2026-34911
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in Un
Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret
CVE-2026-46701
# Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret | Field | Value | | ------------
@nevware21/ts-utils: Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty
CVE-2026-46681
## Summary The _copyProps function in lib/src/object/copy.ts uses for...in to iterate over source object properties wit
containerd user ID handling bypass allows runAsNonRoot evasion
CVE-2026-46680
### Impact A bug was found in containerd where containers launched with a numeric `User` directive that cannot be parsed
js-libp2p: Memory DoS via subscription flood of unique topics
CVE-2026-46679
### Summary Three cooperating omissions in `@libp2p/gossipsub` allow an unauthenticated single peer to exhaust the Node.
Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation
CVE-2026-46640
### Description The `obj.(expr)` dynamic-attribute syntax (added in 3.15.0 as the replacement for the deprecated `attri
Twig: Sandbox property and method bypass via object-destructuring assignment
CVE-2026-46639
### Description The object-destructuring assignment syntax introduced in Twig 3.24.0 generates a call to `CoreExtension
Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token-...
CVE-2026-8428
Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token->output('do_update')) but
Concrete CMS 9.5.0 and below has Stored XSS on the height parameter. The controller does not...
CVE-2026-8203
Concrete CMS 9.5.0 and below has Stored XSS on the height parameter. The controller does not validate or sanitize $heigh
Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to ...
CVE-2026-8426
Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/prepa
Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to ...
CVE-2026-8417
Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/do_up
Concrete CMS 9.5.0 and below is vulnerable to missing authorization in the bulk_user_assignment...
CVE-2026-8350
Concrete CMS 9.5.0 and below is vulnerable to missing authorization in the bulk_user_assignment.php which can lead to pr
Concrete CMS 9.5.0 and below contains a CSRF vulnerability in the install_package() method of...
CVE-2026-8421
Concrete CMS 9.5.0 and below contains a CSRF vulnerability in the install_package() method of concrete/controllers/singl
Concrete CMS 9.5.0 and below is vulnerable to Remote Code Execution due to insecure...
CVE-2026-8135
Concrete CMS 9.5.0 and below is vulnerable to Remote Code Execution due to insecure deserialization occurring in the Ex