plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard...
CVE-2026-108158
plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows
#severity:high
共收录 5417 条相关情报。
← 返回所有主题Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital)...
CVE-2026-90983
Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile allows Aut
ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI...
CVE-2026-108113
ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handl
An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit...
CVE-2026-75348
An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/
An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit...
CVE-2026-75346
An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-
EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read...
CVE-2026-75349
EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manag
OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit...
CVE-2026-75345
OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a
SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and...
CVE-2026-104084
SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a
MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document...
CVE-2026-108110
MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authent
SmarterMail before build 9777 contains a remote code execution vulnerability that allows an...
CVE-2026-104082
SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-
pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password
## Summary `Api.getUserData` (legacy) and `Api.get_userdata` are declared with `@permission(Perms.ANY)` and are reachab
pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session
An admin who revokes a user's privileges through the REST API does not actually revoke them, because the session carryin
pyLoad: Api.set_user_permission never invalidates the target's session
### Summary An admin who revokes or downgrades a non-admin user's permissions through pyLoad's own documented `/api/` RP
pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)
### Summary `UnTar._safe_extractall` — the hardening added for GHSA-mvwx-582f-56r7 — validates member **names** and sym
Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM
CVE-2026-107812
## Summary The self-upgrade downloads the release binary and its checksum (`*.tar.gz` and `*.tar.gz.digest`) through the
Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)
CVE-2026-107808
## Summary nginx-ui supports two second-factor methods — TOTP (OTP) and WebAuthn passkeys — and reports an account as 2
Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs
CVE-2026-107809
## Summary Nginx-UI v2.4.3 stores the API JWT in a browser cookie named `token` and the `AuthRequired` middleware accept
Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up
CVE-2026-107813
## Summary Incomplete fix of GHSA-5v7c-xpfp-p65m: the secure-session (OTP step-up) requirement added to the nginx, cert
0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser
CVE-2026-107811
Summary 0xJacky/nginx-ui contains a high-severity trust-boundary failure between ordinary users and cluster node credent
Nginx UI: Node Secret Credential Exposure via URL Query Parameter
CVE-2026-107807
## 1. Vulnerability Summary nginx-ui's `Node.Secret` is a master credential that bypasses all JWT/password authenticati