Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie
CVE-2026-118777
### Summary The `forge.http` client stored cookies from `Set-Cookie` response headers in a plain object keyed by cookie
#severity:medium
共收录 5506 条相关情报。
← 返回所有主题Forge: TLS client crash when the server sends no certificate
CVE-2026-118778
### Summary The forge TLS client's check for a missing server certificate read the wrong property and never ran. A malic
Forge: AES-GCM authentication bypass via unvalidated tagLength option
CVE-2026-119186
### Summary The AES-GCM mode in forge.cipher does not validate the tagLength option passed to start(). With a tagLength
PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling
CVE-2026-119193
### Summary When PHPT tests are run with code coverage, PHPUnit 13.4.0 to 13.4.3 writes the code of each PHPT test to a
russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)
CVE-2026-116774
## Summary A peer can advertise `maximum packet size = 0` in its channel-open message (`CHANNEL_OPEN` when attacking a
OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
CVE-2026-116677
## Summary The authenticated REST API endpoint for downloading a CA Certificate Revocation List resolves the requested
signalk-server has SSRF via absolute signalk.appIcon URL in the app store icon fetcher
### Summary The app store icon code (`dist/appstore/icon-probe.js` around line 200 and `icon-bytes.js` around line 138)
anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS
## Summary anacrolix/torrent's bencode decoder (`bencode/`) applies **no limit on the nesting depth** of nested diction
AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE
CVE-2026-96634
### Summary This vulnerability is a patch bypass that exploits catastrophic backtracking in a regular expression used t
AdminNeo: CSRF Token Secret Recoverable from Single Observed Token, Enabling Cross-Site Request Forgery
CVE-2026-96629
### Summary AdminNeo's CSRF protection uses a BREACH-resistant XOR masking scheme, but the implementation transmits bot
NationalSecurityAgency/emissary has an incomplete fix for CVE-2026-35571
CVE-2026-54442
### Summary The URL validation regex `^(https?:/)?/.*` added to emissary's `NavAction.java` allows protocol-relative UR
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework phoenix_html allows an attacker who controls attribute nam...
CVE-2026-117645
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework p
Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack o...
CVE-2026-119730
Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers
In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the Shared switch only to them. The create and update endpoints ...
CVE-2026-116248
In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the Sha
In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device
CVE-2026-115828
In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when usi
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during cont...
CVE-2026-7005
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows at
WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject and execute arbitra...
CVE-2026-7004
WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allow
WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers to recover static OAuth clientId and clientSecret values ...
CVE-2026-7003
WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers
A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in HTTP requests. The issue occurs because a security...
CVE-2026-91920
A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encod
A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request includes the kc_action query parameter set to a mandatory ...
CVE-2026-118959
A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request i