Note Mark: Arbitrary File Write via Path Traversal in Asset Names Leads to Remote Code Execution
CVE-2026-44522
### Description The Note Mark application allows authenticated users to upload assets to notes via `POST /api/notes/{no
#severity:high
共收录 5513 条相关情报。
← 返回所有主题FacturaScripts Vulnerable to Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism
CVE-2026-27891
### Summary A Critical vulnerability exists in the `Plugins::add()` function. The system fails to properly validate the
Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1...
CVE-2026-7821
Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthen
An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows...
CVE-2026-5788
An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticat
An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and...
CVE-2026-5786
An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote
An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0...
CVE-2026-5787
An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unaut
An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1...
CVE-2026-6973
An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authentic
A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote,...
CVE-2026-7413
A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated (or weakly authen
Regex Denial of Service in youtube-regex npm package through version 1.0.5.
CVE-2025-65122
Regex Denial of Service in youtube-regex npm package through version 1.0.5.
Cinny vulnerable to access token disclosure via invalidated emoji pack avatar URL in service worker
CVE-2026-42553
### Impact A remote authenticated attacker who shares a room with a victim and has permissions to create room emotes (fo
vm2 Sandbox Access to Host Buffer.alloc Allows timeout Bypass Resulting in Memory Exhaustion
CVE-2026-44004
### Summary Sandboxed code can call `Buffer.alloc()` with an arbitrary size to allocate memory directly on the host heap
vm2 has a Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)
CVE-2026-44001
### Summary A sandbox escape vulnerability in vm2 v3.10.5 allows any sandboxed code to crash the host Node.js process vi
Bandit Buffers Unbounded WebSocket Continuation Frames, Allowing Unauthenticated Memory Exhaustion
CVE-2026-42786
### Summary A single unauthenticated WebSocket client can exhaust server memory in any Bandit-fronted application that a
Bandit's unbounded WebSocket inflate causes BEAM OOM with a single frame
CVE-2026-39804
### Summary When a Bandit-fronted server has explicitly enabled WebSocket permessage-deflate (`compress: true`), an una
hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
The NSEC3 closest-encloser proof validation in `hickory-proto`'s (0.25.0-alpha.3 ... 0.25.2) and `hickory-net`'s (0.26.0
Talos Linux has a local privilege escalation from untrusted workloads
### Summary A vulnerability in the Linux kernel's algif_aead subsystem (CVE-2026-31431, "copy.fail") allows an unprivil
Diffusers: None.py has Trust Remote Code Bypass
## Background This vulnerability is found in the `DiffusionPipeline.from_pretrained` flow, which is used to load a pipe
katalyst-koi: Session cookies can be replayed after user logout
CVE-2026-44511
### Impact Admin session cookies were not invalidated when an admin user logged out. An attacker with access to a valid
Free5GC UDM has Improper Input Validation and Generation of Error Messages Containing Sensitive Information
CVE-2026-42459
## Summary The free5GC UDM component fails to validate the `supi` path parameter in six GET handlers of the `nudm-sdm`
Free5GC PCF: Missing authentication middleware in Npcf_SMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPI
CVE-2026-42083
### Summary PCF Npcf_SMPolicyControl missing authentication middleware allows unauthenticated access to SM policy handle