Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that...
CVE-2026-48542
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attack
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题The Botslab G980H dash camera firmware generates the default WiFi password using predictable...
CVE-2026-88761
The Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portion
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain...
CVE-2026-93290
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access i
Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization...
CVE-2026-56792
Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low priv
social-auth-core has a Session Fixation issue
CVE-2026-57179
### Impact The partial-pipeline resume mechanism accepted `partial_token` as a bearer credential without binding it to
social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend
CVE-2026-57177
### Impact The LoginRadius backend did not validate OAuth state during the authentication flow. Applications using thi
social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend
CVE-2026-57176
### Impact The Vend OAuth2 backend used only the numeric Vend `user_id` as the social-auth UID. When multiple Vend sho
social-auth-core has an Improper Authentication issue
CVE-2026-57175
### Impact The SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that t
Ash: Private action arguments can be set by user input via string-keyed params and atomic changesets
CVE-2026-55736
### Summary Ash fails to consistently strip private action arguments (those declared with `public?: false`) when a chan
hpack: Unbounded variable integer decoding can cause run-away computation on malformed input
CVE-2026-59980
### Impact Users of the python-hyper/hpack library, most commonly used as downstream dependency of the python-hyper/h2
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces
CVE-2026-56742
### Impact In Cilium clusters using [Gateway API](https://docs.cilium.io/en/stable/network/servicemesh/gateway-api/gate
xhtml-purifier has HTML attribute-injection (sanitizer bypass) that leads to XSS
CVE-2026-61784
xhtml-purifier does not HTML-entity-encode attribute values when serializing its sanitized output. In attributeString()
CyberChef: Prototype pollution in Series Chart operation
CVE-2026-57439
On 5 June 2026 CyberChef received a security vulnerability report from @hyuunnn detailing a vulnerability in the Series
A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an...
CVE-2026-96772
A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /ac
A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the...
CVE-2026-96881
A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file
In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header...
CVE-2026-97149
In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempU
A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.3_20181106...
CVE-2026-96774
A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.3_20181106 Build 107. This affects
A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this...
CVE-2026-96882
A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the functio
A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function...
CVE-2026-96803
A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBac
A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function...
CVE-2026-96880
A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/