hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the...
CVE-2026-68765
hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 mod
#severity:medium
共收录 5490 条相关情报。
← 返回所有主题Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing...
CVE-2026-75104
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitr
Legora before 2026-08-14 contains a cross-site scripting vulnerability that allows attackers to...
CVE-2026-74234
Legora before 2026-08-14 contains a cross-site scripting vulnerability that allows attackers to achieve arbitrary JavaSc
A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function...
CVE-2026-75013
A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function setWizardCfg of the fi
A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by...
CVE-2026-75012
A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by this issue is the func
Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite
CVE-2026-59903
### Summary Netty's `CorsHandler` silently overwrites existing `Vary` headers, enabling cache poisoning and sensitive in
Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling
Fix: PR #7906 (ether/etherpad). A set of medium/low hardening fixes: - **Weak RNG for tokens (CWE-330):** author/sessio
uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability
CVE-2026-55062
### Summary Path Traversal vulnerability in hook filename handling allows attackers to access and manipulate arbitrary f
uniget CLI has an EDITOR Command Injection
CVE-2026-55061
### Summary The uniget CLI has a command injection vulnerability in [hooks.go](vscode-file://vscode-app/app/extra/vscode
Glances: as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config
CVE-2026-68520
## Summary Glances provides `as_dict_secure()` explicitly designed for unauthenticated API access, with a docstring sta
A vulnerability has been found in gomarble-ai facebook-ads-mcp-server 0.1.0. The impacted element...
CVE-2026-19956
A vulnerability has been found in gomarble-ai facebook-ads-mcp-server 0.1.0. The impacted element is the function fetch_
stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF...
CVE-2026-73058
stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthe
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is...
CVE-2026-18347
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypa
The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
CVE-2026-2357
The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt_bb_shortcod
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
CVE-2026-12998
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure D
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to...
CVE-2026-17608
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forg
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is...
CVE-2026-17604
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversa
The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up...
CVE-2026-17582
The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up to, and including, 9.1.7
The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id'...
CVE-2026-2283
The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id' parameter in all versions u
The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to...
CVE-2026-9767
The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'or