HTTP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...

CVE-2026-6868

HTTP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

历史摘要 · 未重新核验 · GitHub Advisory

Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-7379

Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

历史摘要 · 未重新核验 · GitHub Advisory

A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an...

CVE-2026-7468

A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function...

CVE-2026-7446

A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyze_results/filter_res

历史摘要 · 未重新核验 · GitHub Advisory

A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this...

CVE-2026-7443

A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was found in Algovate xhs-mcp 0.8.11. This affects the function...

CVE-2026-7417

A vulnerability was found in Algovate xhs-mcp 0.8.11. This affects the function xhs_publish_content of the file src/serv

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function...

CVE-2026-7416

A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function build_project/run_tests

历史摘要 · 未重新核验 · GitHub Advisory

Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool

CVE-2026-41686

The `BetaLocalFilesystemMemoryTool` in the Anthropic TypeScript SDK created memory files and directories using the Node.

历史摘要 · 未重新核验 · GitHub Advisory

netfoil's optional seccomp sandboxing was not applied

### Summary The optional flag `--filter-system-calls` was not applied even if specified. ### Details This is a defense

历史摘要 · 未重新核验 · GitHub Advisory

Netfoil has incorrect allowlist enforcement

### Summary Rules could be bypassed by changing the first character: `example.com` could be be bypassed by e.g. `fxample

历史摘要 · 未重新核验 · GitHub Advisory

Admidio: OIDC Token Introspection Endpoint Returns Active for All Tokens Without Validation

CVE-2026-41671

## Summary The OIDC token introspection endpoint (`/modules/sso/index.php/oidc/introspect`) always returns `{"active":

历史摘要 · 未重新核验 · GitHub Advisory

Admidio Missing Minimum Administrator Check in Role Membership Removal

CVE-2026-41662

## Summary `Role::stopMembership()` does not verify whether removing a user from the administrator role leaves zero adm

历史摘要 · 未重新核验 · GitHub Advisory

Admidio vulnerable to reflected XSS in msg_window.php via Square Bracket to HTML Tag Conversion

CVE-2026-41661

## Summary An unauthenticated attacker can execute arbitrary JavaScript in any Admidio user's browser through a reflect

历史摘要 · 未重新核验 · GitHub Advisory

Admidio's Missing Authorization on Inventory Module Destructive Endpoints Allows Any Authenticated User to Delete Items

CVE-2026-41658

## Summary The Admidio inventory module enforces authorization for destructive operations (delete, retire, reinstate) o

历史摘要 · 未重新核验 · GitHub Advisory

Admidio Exposes Cross-Organization Member Data via Permission Check Mismatch in contacts_data.php

CVE-2026-41657

## Summary The `contacts_data.php` endpoint uses a weaker permission check (`isAdministratorUsers()`, requiring only `r

历史摘要 · 未重新核验 · GitHub Advisory

Admidio has Path Traversal via Unvalidated `name` Parameter in Document Add Mode that Enables Arbitrary Server File Read

CVE-2026-41656

## Summary The `add` mode in `modules/documents-files.php` accepts a `name` parameter validated only as `'string'` type

历史摘要 · 未重新核验 · GitHub Advisory

Admidio has Path Traversal in ECard Preview that Allows Reading Arbitrary Server Files Including Database Credentials

CVE-2026-41655

## Summary The `ecard_preview.php` endpoint does not validate that the `ecard_template` POST parameter is a safe filena

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Webchat audio embedding could read local files without local-root containment

## Impact OpenClaw deployments before `2026.4.15` could embed host-local audio files into webchat responses without app

历史摘要 · 未重新核验 · GitHub Advisory

wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If...

CVE-2026-1858

wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromis

历史摘要 · 未重新核验 · GitHub Advisory

A security vulnerability has been detected in geekgod382 filesystem-mcp-server 1.0.0. This issue...

CVE-2026-7400

A security vulnerability has been detected in geekgod382 filesystem-mcp-server 1.0.0. This issue affects the function is

历史摘要 · 未重新核验 · GitHub Advisory