A flaw has been found in SourceCodester Comment System 1.0. This issue affects some unknown...
CVE-2026-8126
A flaw has been found in SourceCodester Comment System 1.0. This issue affects some unknown processing of the file post_
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows...
CVE-2026-3508
An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause s
A vulnerability was found in SourceCodester SUP Online Shopping 1.0. The affected element is an...
CVE-2026-8128
A vulnerability was found in SourceCodester SUP Online Shopping 1.0. The affected element is an unknown function of the
A security flaw has been discovered in gyoridavid short-video-maker up to 1.3.4. This affects an...
CVE-2026-8115
A security flaw has been discovered in gyoridavid short-video-maker up to 1.3.4. This affects an unknown part of the fil
An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an...
CVE-2026-6736
An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attack
A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server...
CVE-2026-8106
A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page th
In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project...
CVE-2026-40214
In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer. Th
Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that...
CVE-2026-41928
Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an...
CVE-2026-7541
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to
rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding
CVE-2026-44662
`CipherCtxRef::cipher_update`, `CipherCtxRef::cipher_update_vec`, and `symm::Crypter::update` incorrectly sized output b
utcp-http vulnerable to SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol
CVE-2026-44661
## Summary The `utcp-http` plugin is vulnerable to a blind Server-Side Request Forgery (SSRF) caused by a trust-boundar
A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an...
CVE-2026-8098
A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an unknown function of the
A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects...
CVE-2026-8083
A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the
Ech0 allows PUT /api/echo/like/:id unauthenticated: anonymous callers to modify any echo's fav_count
## Summary `PUT /api/echo/like/:id` at `internal/router/echo.go:12` is registered on `PublicRouterGroup` with no authen
Ech0's Unauthenticated Like Endpoint Enables Arbitrary Engagement Metric Inflation
### Summary **No authentication** is required to invoke **`PUT /api/echo/like/:id`**. The handler is registered on the
Ech0's RSS feed renders unescaped tag names and raw-HTML markdown, stored XSS against subscribers
## Summary The public RSS/Atom feed at `/rss` renders two attacker-controlled surfaces without HTML escaping. Tag names
Ech0 comment model's Email field returned on public /api/comments endpoints
## Summary The `Comment` model serializes its `Email` field through the public comment-listing API. `internal/model/com
Zebra Vulnerable to Allocation Amplification in Inbound Network Deserializers
CVE-2026-44500
# CVE-2026-44500: Allocation Amplification in Inbound Network Deserializers ## Summary Several inbound deserialization
FacturaScripts Vulnerable to Authenticated Remote Code Execution (RCE) via GIF Image Upload in Product Images
CVE-2026-42879
# CVE-2026-42879 - FacturaScripts - Authenticated Unrestricted File Upload via MIME Type Bypass ## Summary An authen
FacturaScripts Vulnerable to Unauthenticated phpinfo() Disclosure via Installer Endpoint
CVE-2026-42878
### Summary An unauthenticated information disclosure vulnerability in the Installer controller allows any remote attack