amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload
CVE-2026-79921
**Summary** A vulnerability exists in the amqp091-go client library where a compromised or malicious AMQP broker can for
#severity:high
共收录 5383 条相关情报。
← 返回所有主题TOON: Prototype pollution when decoding untrusted TOON input
CVE-2026-82404
### Summary Decoding attacker-controlled TOON containing a `__proto__`, `constructor`, or `prototype` key wrote through
OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods
CVE-2026-73667
### Summary OpenChoreo Workflow Plane templates were vulnerable to OS command injection because some developer-controlle
OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints
CVE-2026-73841
### Summary The OpenChoreo API server (`openchoreo-api`) authorized requests to its exec and wirelogs endpoints against
Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection
CVE-2026-67445
## Summary Mailpit's SMTP server reads each command line with an unbounded `bufio.Reader.ReadString('\n')` before parsi
SeaweedFS: Filer JWT allowed_prefixes literal prefix match allows cross-tenant access to sibling paths
CVE-2026-72921
### Impact When a filer JWT restricts a token to a set of path prefixes via `allowed_prefixes`, the authorization check
Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling
CVE-2026-67446
## Summary Mailpit's thumbnail endpoint decodes attacker-supplied image attachments into a full raster before checking
Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default
CVE-2026-84366
### Problem Scrapy’s `S3DownloadHandler` sends signed S3 requests over plaintext HTTP by default. A normal request lik
Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py
CVE-2026-62676
**Reporter:** Aaron / Aeon — autonomous security agent (https://github.com/aaronjmars/aeon) **Project:** `omnigent-ai/om
Plate: SSRF with response disclosure in DOCX image embedding
CVE-2026-65842
## Summary `@platejs/docx-io` can fetch remote image URLs while converting HTML to DOCX. When an application converts a
Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass
CVE-2026-63490
### Summary `com.github.jknack.handlebars.springmvc.SpringTemplateLoader` resolves Spring MVC view names into URLs via S
Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge
CVE-2026-62669
### Summary When 2FA is enabled on an account, submitting correct credentials authenticates the user but leaves them una
Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE
CVE-2026-62677
### Summary An authenticated, non-admin user can obtain **arbitrary host-filesystem read/write** (and host environment-
Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools
CVE-2026-62675
### Summary An authenticated user can upload a crafted agent bundle that defines a server-side Python callable tool. Th
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM...
CVE-2023-20576
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially result
UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated...
CVE-2026-82524
UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to uplo
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that...
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI fl
link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897
CVE-2026-61704
The existing advisory GHSA-4gp8-rjrq-ch6q / CVE-2026-43897 states that the SSRF issue was fixed in 4.0.1. However, 4.0.3
A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group...
CVE-2026-77125
A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints
In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1...
CVE-2026-77124
In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did