SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF)
# Security Advisory — SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of `CheckHostSSRF`) | Field | Value | |-
#severity:high
共收录 5417 条相关情报。
← 返回所有主题@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header
CVE-2026-19481
### Impact Versions of `@fastify/busboy` from 1.0.0 and prior to 3.2.1 are vulnerable to a Denial of Service. The multi
@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
CVE-2026-19484
### Impact Versions of `@fastify/busboy` from 3.1.0 and prior to 3.2.1 are vulnerable to a Denial of Service. The vendo
Praxis affected by HTTP/2 Bomb
### Summary Multiple denial-of-service vulnerabilities have been discovered in HTTP/2 server implementations. All have
Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)
CVE-2026-71416
### Summary The Headroom WebSocket server does not validate the `Origin` header of incoming client WebSocket requests be
SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers
CVE-2026-74904
Same CWE-862 family, found via an automated bulk sweep of every `/api/block/*` handler in `kernel/api/block.go` for the
aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers
CVE-2026-18140
### Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smith
Vibe-Trading file-read tools expose arbitrary server-readable files
### Summary: 2 findings — `safe_user_path()` accepts any path under `Path.home()` or `Path.cwd()`, which inside the shi
Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function name
### Summary A cross-tenant SQL injection in the TSQL query compiler lets **any authenticated trigger.dev customer read
Trigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure Compromise
## Summary Self-hosted trigger.dev v4 instances deployed using the provided Docker Compose configuration with default s
figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width
CVE-2026-96780
### Impact A denial-of-service (infinite loop) can occur in `text()` / `textSync()` when **both**: - `whitespaceBreak: t
Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks
### Summary Pinning a CA certificate via `pinnedPeerCertSha256` can lead to the success of MITM attacks in some cases.
Trigger.dev: Missing Authentication in Run Replay Action Allows Cross-Organization Task Execution (IDOR)
### Summary The run replay `action` function at `apps/webapp/app/routes/resources.taskruns.$runParam.replay.ts` has no
UTMStack before 11.2.16 contains a JPQL injection vulnerability that allows authenticated...
CVE-2026-82045
UTMStack before 11.2.16 contains a JPQL injection vulnerability that allows authenticated attackers to read arbitrary en
A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open...
CVE-2026-104988
A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enroll
Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross...
CVE-2026-39718
Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This
Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST...
CVE-2026-104991
Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST API issue endpoints (sing
UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService...
CVE-2026-82039
UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows
Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate...
CVE-2026-96940
Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote...
CVE-2020-37278
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arb