Electerm Security Vulnerability: RCE via malicious SSH server filename in openFileWithEditor
CVE-2026-43943
### Impact A code execution (RCE) vulnerability exists in electerm's SFTP open with system editor or "Edit with custom
#severity:high
共收录 5513 条相关情报。
← 返回所有主题Electerm has an unvalidated shell.openExternal that allows arbitrary protocol execution via terminal link click
CVE-2026-43941
### Impact Electerm's terminal hyperlink handler passes any URL clicked in the terminal directly to `shell.openExternal
Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The...
CVE-2026-6659
Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function
This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow...
CVE-2026-6411
This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain e
A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server...
CVE-2026-8034
A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that a
Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to...
CVE-2026-41105
Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges ove
Improper neutralization of special elements used in a command ('command injection') in Copilot...
CVE-2026-33111
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) all
Improper neutralization of special elements in output used by a downstream component ('injection'...
CVE-2026-26164
Improper neutralization of special elements in output used by a downstream component ('injection') in M365 Copilot allow
OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple...
CVE-2026-40213
OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This un
Externally controlled reference to a resource in another sphere in Microsoft Partner Center...
CVE-2026-34327
Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attac
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker...
CVE-2026-35435
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges
Improper neutralization of special elements in M365 Copilot allows an unauthorized attacker to...
CVE-2026-26129
Improper neutralization of special elements in M365 Copilot allows an unauthorized attacker to disclose information over
Improper neutralization of input during web page generation ('cross-site scripting') in Azure...
CVE-2026-32207
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an
netbox-data-flows has stored XSS in ObjectAlias names rendered inside DataFlow tables
### Summary An authenticated user who can create or edit `ObjectAlias` objects can store arbitrary HTML/JavaScript in an
mcp-ssh-tool has file transfer path policy bypass and bearer token comparison hardening
## Summary `mcp-ssh-tool` has released version `2.1.1` with security hardening for transfer path authorization and HTTP
Microsoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files during install
CVE-2026-44641
### Summary Microsoft APM normalizes marketplace plugins by copying plugin components referenced in `plugin.json` into `
ech0's acess tokens with expiry=never cannot be revoked: logout panics, delete does not blacklist JTI
## Summary Access tokens created with the "never expire" option have no `exp` JWT claim. Three independent revocation m
Ech0's OAuth redirect URI validation ignores path component, enables exchange-code theft
## Summary `parseAndValidateClientRedirect` at `internal/service/auth/auth.go:448` validates OAuth client-redirect URIs
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the...
CVE-2026-44742
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as e
Ech0 has Server-Side Request Forgery (SSRF) via Connect Handler fetchPeerConnectInfo
## Summary The `fetchPeerConnectInfo` function in `internal/service/connect/connect.go:214-239` uses `httpUtil.SendReque