mirror of
https://github.com/trickest/cve.git
synced 2026-11-07 04:29:23 -10:00
Update Sun Jul 19 12:00:28 UTC 2026
This commit is contained in:
trickest-workflows committed
1 parent
638563f1ec
commit
b4f1378756
43 files changed
+490
-14
No files matched your search
@@ -0,0 +1,17 @@
|
||||
### [CVE-2007-3120](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3120)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocp_dp parameter. NOTE: some of these details are obtained from third party information.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://sourceforge.net/project/shownotes.php?release_id=514035
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Use-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote atta
|
||||
|
||||
#### Reference
|
||||
- http://h07.w.interia.pl/Safari.rar
|
||||
- http://reviews.cnet.com/8301-13727_7-20004709-263.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -10,7 +10,7 @@ DOMPDF before 0.6.2 allows Information Disclosure.
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://github.com/dompdf/dompdf/compare/v0.6.1...v0.6.2
|
||||
|
||||
#### Github
|
||||
- https://github.com/violinist-dev/symfony-cloud-security-checker
|
||||
|
||||
@@ -10,7 +10,7 @@ DOMPDF before 0.6.2 allows denial of service.
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://github.com/dompdf/dompdf/compare/v0.6.1...v0.6.2
|
||||
|
||||
#### Github
|
||||
- https://github.com/violinist-dev/symfony-cloud-security-checker
|
||||
|
||||
@@ -10,7 +10,7 @@ DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-23
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://github.com/dompdf/dompdf/compare/v0.6.1...v0.6.2
|
||||
|
||||
#### Github
|
||||
- https://github.com/nhthongDfVn/File-Converter-Exploit
|
||||
|
||||
@@ -11,6 +11,7 @@ An issue was discovered in NiceHash Miner before 2.0.3.0. A missing rate limit w
|
||||
|
||||
#### Reference
|
||||
- https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/
|
||||
- https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cvemon
|
||||
|
||||
@@ -11,6 +11,7 @@ An issue was discovered in NiceHash Miner before 2.0.3.0. Missing Authorization
|
||||
|
||||
#### Reference
|
||||
- https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/
|
||||
- https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ A Username Enumeration via Error Message issue was discovered in NiceHash Miner
|
||||
|
||||
#### Reference
|
||||
- https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/
|
||||
- https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Directory traversal vulnerability in class-simple_job_board_resume_download_hand
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/161050/Simple-JobBoard-Authenticated-File-Read.html
|
||||
- http://packetstormsecurity.com/files/165892/WordPress-Simple-Job-Board-2.9.3-Local-File-Inclusion.html
|
||||
- https://docs.google.com/document/d/1TbePkrRGsczepBaJptIdVRvfRrjiC5hjGg_Vxdesw6E/edit?usp=sharing
|
||||
|
||||
#### Github
|
||||
- https://github.com/20142995/nuclei-templates
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
### [CVE-2024-12085](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12085)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -12,6 +12,7 @@ Es wurde eine problematische Schwachstelle in SourceCodester Employee Management
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://vuldb.com/?id.298425
|
||||
- https://www.sourcecodester.com/
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
### [CVE-2025-49794](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49794)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
### [CVE-2025-49796](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49796)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,6 +1,5 @@
|
||||
### [CVE-2025-5914](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5914)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
### [CVE-2025-6020](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6020)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -19,7 +19,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,8 +1,7 @@
|
||||
### [CVE-2025-7195](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7195)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,6 +1,5 @@
|
||||
### [CVE-2025-7425](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7425)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -13,6 +13,7 @@ Es geht hierbei um die Funktion do_directive der Datei preproc.c. Mit der Manipu
|
||||
|
||||
#### Reference
|
||||
- https://drive.google.com/file/d/11vEV1vMHXO4BrDGhvWAMm0Qo1woiUwVV/view?usp=drive_link
|
||||
- https://vuldb.com/?submit.623184
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-15135](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15135)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the file /edit_food_items.php. The manipulation of the argument update results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://vuldb.com/submit/851065
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-2776](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2776)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://bugzilla.mozilla.org/show_bug.cgi?id=2015266
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-2806](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2806)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://bugzilla.mozilla.org/show_bug.cgi?id=2006199
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-40033](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40033)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap memory. The vulnerability occurs because rectangle validation clamps coordinates to UINT16_MAX but performs copy operations using unclamped cache entry dimensions, enabling malicious RDP servers to trigger large out-of-bounds writes and potentially achieve remote code execution or client crash.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-p6r2-4hgm-m6ff
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-40035](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40035)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Unfurl through 2025.08 contains an improper input validation vulnerability in config parsing that enables Flask debug mode by default. The debug configuration value is read as a string and passed directly to app.run(), causing any non-empty string to evaluate truthy, allowing attackers to access the Werkzeug debugger and disclose sensitive information or achieve remote code execution.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/obsidianforensics/unfurl/security/advisories/GHSA-vg9h-jx4v-cwx2
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-40036](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40036)
|
||||
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
Unfurl before 2026.04 contains an unbounded zlib decompression vulnerability in parse_compressed.py that allows remote attackers to cause denial of service. Attackers can submit highly compressed payloads via URL parameters to the /json/visjs endpoint that expand to gigabytes, exhausting server memory and crashing the service.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/obsidianforensics/unfurl/security/advisories/GHSA-h5qv-qjv4-pc5m
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-40084](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40084)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal through the Report format_file Parameter, causing arbitrary file read. This vulnerability occurs in two stages. In the first stage (stored injection), lib/html_reports.php at line 283 stores $save['format_file'] = $post['format_file'] directly into the database without any validation. In the second stage (file read), lib/reports.php at line 667 concatenates CACTI_PATH_FORMATS . '/' . $format_file, and line 670 then calls file($format_file), reading arbitrary files from the filesystem. This issue has been fixed in version 1.2.31.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Cacti/cacti/security/advisories/GHSA-mjvw-mhj5-9jcj
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-40100](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40100)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
FastGPT is an AI Agent building platform. Prior to 4.14.10.3, the /api/core/app/mcpTools/runTool endpoint accepts arbitrary URLs without authentication. The internal IP check in isInternalAddress() only blocks private IPs when CHECK_INTERNAL_IP=true, which is not the default. This allows unauthenticated attackers to perform SSRF against internal network resources. This vulnerability is fixed in 4.14.10.3.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/labring/FastGPT/security/advisories/GHSA-jrhc-f3j7-f8g4
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-40107](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40107)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
SiYuan is a personal knowledge management system. Prior to 3.6.4, SiYuan configures Mermaid.js with securityLevel: "loose" and htmlLabels: true. In this mode, <img> tags with src attributes survive Mermaid's internal DOMPurify and land in SVG <foreignObject> blocks. The SVG is injected via innerHTML with no secondary sanitization. When a victim opens a note containing a malicious Mermaid diagram, the Electron client fetches the URL. On Windows, a protocol-relative URL (//attacker.com/image.png) resolves as a UNC path (\\attacker.com\image.png). Windows attempts SMB authentication automatically, sending the victim's NTLMv2 hash to the attacker. This vulnerability is fixed in 3.6.4.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/siyuan-note/siyuan/security/advisories/GHSA-w95v-4h65-j455
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-40186](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40186)
|
||||
|
||||
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
ApostropheCMS is an open-source Node.js content management system. A regression introduced in commit 49d0bb7, included in versions 2.17.1 of the ApostropheCMS-maintained sanitize-html package bypasses allowedTags enforcement for text inside nonTextTagsArray elements (textarea and option). ApostropheCMS version 4.28.0 is affected through its dependency on the vulnerable sanitize-html version. The code at packages/sanitize-html/index.js:569-573 incorrectly assumes that htmlparser2 does not decode entities inside these elements and skips escaping, but htmlparser2 10.x does decode entities before passing text to the ontext callback. As a result, entity-encoded HTML is decoded by the parser and then written directly to the output as literal HTML characters, completely bypassing the allowedTags filter. An attacker can inject arbitrary tags including XSS payloads through any allowed option or textarea element using entity encoding. This affects non-default configurations where option or textarea are included in allowedTags, which is common in form builders and CMS platforms. This issue has been fixed in version 2.17.2 of sanitize-html and 4.29.0 of ApostropheCMS.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-9mrh-v2v3-xpfm
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-40188](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40188)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
goshs is a SimpleHTTPServer written in Go. From 1.0.7 to before 2.0.0-beta.4, the SFTP command rename sanitizes only the source path and not the destination, so it is possible to write outside of the root directory of the SFTP. This vulnerability is fixed in 2.0.0-beta.4.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/patrickhener/goshs/security/advisories/GHSA-2943-crp8-38xx
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-40247](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40247)
|
||||
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
free5GC is an open-source implementation of the 5G core network. In versions 4.2.1 and below of the UDR service, the handler for reading Traffic Influence Subscriptions checks whether the influenceId path segment equals subs-to-notify, but does not return after sending the HTTP 404 response when validation fails. Execution continues and the subscription data is returned alongside the 404 response. An unauthenticated attacker with access to the 5G Service Based Interface can read arbitrary Traffic Influence Subscriptions, including SUPIs/IMSIs, DNNs, S-NSSAIs, and callback URIs, by supplying any value for the influenceId path segment. A patched version was not available at the time of publication.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/free5gc/free5gc/security/advisories/GHSA-x5r2-r74c-3w28
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-40253](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40253)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. In versions 3.26.0 and below, the BER/DER decoding functions in the shared common library (asn1.c) accept a raw pointer but no buffer length parameter, and trust attacker-controlled BER length fields without validating them against actual buffer boundaries. All primitive decoders are affected: ber_decode_INTEGER, ber_decode_SEQUENCE, ber_decode_OCTET_STRING, ber_decode_BIT_STRING, and ber_decode_CHOICE. Additionally, ber_decode_INTEGER can produce integer underflows when the encoded length is zero. An attacker supplying a malformed BER-encoded cryptographic object through PKCS#11 operations such as C_CreateObject or C_UnwrapKey, token loading from disk, or remote backend communication can trigger out-of-bounds reads. This affects all token backends (Soft, ICA, CCA, TPM, EP11, ICSF) since the vulnerable code is in the shared common library. A patch is available thorugh commit ed378f463ef73364c89feb0fc923f4dc867332a3.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/opencryptoki/opencryptoki/security/advisories/GHSA-c9cf-6vr4-wfxm
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-40289](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40289)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents, the browser bridge (praisonai browser start) is vulnerable to unauthenticated remote session hijacking due to missing authentication and a bypassable origin check on its /ws WebSocket endpoint. The server binds to 0.0.0.0 by default and only validates the Origin header when one is present, meaning any non-browser client that omits the header is accepted without restriction. An unauthenticated network attacker can connect, send a start_session message, and the server will route it to the first idle browser-extension WebSocket (effectively hijacking that session) and then broadcast all resulting automation actions and outputs back to the attacker. This enables unauthorized remote control of connected browser automation sessions, leakage of sensitive page context and automation results, and misuse of model-backed browser actions in any environment where the bridge is network-reachable. This issue has been fixed in versions 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-8x8f-54wf-vv92
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-40348](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40348)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can trigger server-side requests to arbitrary internal targets through `POST /settings/jellyfin/server-url-verify`. The endpoint accepts a user-controlled URL, appends `/system/info/public`, and sends a server-side HTTP request with Guzzle. Because there is no restriction on internal hosts, loopback addresses, or private network ranges, this can be abused for SSRF and internal network probing. Any ordinary authenticated user can use this endpoint to make the server connect to arbitrary internal targets and distinguish between different network states. This enables SSRF-based internal reconnaissance, including host discovery, port-state probing, and service fingerprinting. In certain deployments, it may also be usable to reach internal administrative services or cloud metadata endpoints that are not directly accessible from the outside. Version 0.71.1 fixes the issue.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/leepeuker/movary/security/advisories/GHSA-2m2v-v563-qqvj
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-40501](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40501)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a remote code execution vulnerability in SearchService that allows remote attackers to execute arbitrary code by delivering malicious JavaScript through controlled search provider content loaded into an Electron BrowserWindow configured with nodeIntegration enabled and contextIsolation disabled. Attackers who control a search engine provider, individual search result pages, or provider settings pages can execute JavaScript with full Node.js privileges, gaining access to fs, child_process, os, and process.env under the operating-system account of the Cherry Studio process.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/Mundi-Xu/99af1b08275fd437cfb79bfe481e68b7
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-40576](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40576)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
excel-mcp-server is a Model Context Protocol server for Excel file manipulation. A path traversal vulnerability exists in excel-mcp-server versions up to and including 0.1.7. When running in SSE or Streamable-HTTP transport mode (the documented way to use this server remotely), an unauthenticated attacker on the network can read, write, and overwrite arbitrary files on the host filesystem by supplying crafted filepath arguments to any of the 25 exposed MCP tool handlers. The server is intended to confine file operations to a directory set by the EXCEL_FILES_PATH environment variable. The function responsible for enforcing this boundary — get_excel_path() — fails to do so due to two independent flaws: it passes absolute paths through without any check, and it joins relative paths without resolving or validating the result. Combined with zero authentication on the default network-facing transport and a default bind address of 0.0.0.0 (all interfaces), this allows trivial remote exploitation. This vulnerability is fixed in 0.1.8.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/haris-musa/excel-mcp-server/security/advisories/GHSA-j98m-w3xp-9f56
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-40901](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40901)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below ship the legacy velocity-1.7.jar, which pulls in commons-collections-3.2.1.jar containing the InvokerTransformer deserialization gadget chain. Quartz 2.3.2, also bundled in the application, deserializes job data BLOBs from the qrtz_job_details table using ObjectInputStream with no deserialization filter or class allowlist. An authenticated attacker who can write to the Quartz job table, such as through the previously described SQL injection in previewSql, can replace a scheduled job's JOB_DATA with a malicious CommonsCollections6 gadget chain payload. When the Quartz cron trigger fires, the payload is deserialized and executes arbitrary commands as root inside the container, achieving full remote code execution. This issue has been fixed in version 2.10.21.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/dataease/dataease/security/advisories/GHSA-gm5q-g72w-c466
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-44421](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44421)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs. The bug is in gdi_CacheToSurface: it validates a destination rectangle that is clamped to UINT16_MAX, but then performs the copy using the original cacheEntry->width/height. This can cause a large out-of-bounds heap write and may lead to client crashes or code execution. This bug is reachable from a malicious RDP server, but only when the client has RDPGFX enabled. This vulnerability is fixed in 3.26.0.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-p6r2-4hgm-m6ff
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-53742](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53742)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. Attackers with contributor access can craft a shortcode attribute that injects an event handler executing in a viewer's browser.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.vulncheck.com/advisories/simple-link-directory-through-stored-xss-via-embed-shortcode-attributes
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-53994](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53994)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
ProFTPD mod_sftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxp_packet_read() function accepts the attacker-supplied 32-bit big-endian SFTP packet length without a minimum sanity check. A value of 0 causes an unsigned subtraction elsewhere in the read path to underflow to approximately 4 GB. That oversized request reaches the core memory allocator, where the rounded size is computed in size_t but passed to new_block() as a 32-bit int; the low 32 bits of 0x100000000 are 0, so new_block() returns a small (~512-byte) block while the caller is told it received ~4 GB. The subsequent fill loop then streams attacker-controlled bytes past the end of the 544-byte allocation, producing an attacker-controlled heap buffer overflow. An authenticated user can crash the per-connection ProFTPD session child on demand with a single malformed SFTP packet (packet_len=0 followed by a body greater than approximately 544 bytes), producing reliable authenticated remote denial of service. Depending on heap layout and adjacent allocations, heap metadata corruption and further consequences beyond denial of service may be possible, though only denial of service is demonstrated by the supplied proof of concept.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.vulncheck.com/advisories/proftpd-mod-sftp-heap-buffer-overflow-via-unsigned-integer-underflow-and-size-truncation
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2026-58056](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58056)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-6304](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6304)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://issues.chromium.org/issues/496393742
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,34 @@
|
||||
### [CVE-2026-7683](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7683)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A weakness has been identified in Edimax BR-6428nC up to 1.16. This affects an unknown function of the file /goform/setWAN of the component Web Interface. This manipulation of the argument pppUserName/pptpUserName causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://vuldb.com/vuln/360842/cti
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -8948,6 +8948,7 @@ CVE-2007-3109 - http://securityreason.com/securityalert/2784
|
||||
CVE-2007-3111 - https://www.exploit-db.com/exploits/4023
|
||||
CVE-2007-3118 - https://www.exploit-db.com/exploits/4034
|
||||
CVE-2007-3119 - https://www.exploit-db.com/exploits/4040
|
||||
CVE-2007-3120 - http://sourceforge.net/project/shownotes.php?release_id=514035
|
||||
CVE-2007-3131 - http://securityreason.com/securityalert/2783
|
||||
CVE-2007-3132 - http://www.symantec.com/avcenter/security/Content/2007.06.05b.html
|
||||
CVE-2007-3133 - http://securityreason.com/securityalert/2782
|
||||
@@ -20352,6 +20353,7 @@ CVE-2010-1938 - http://securityreason.com/securityalert/7450
|
||||
CVE-2010-1938 - http://site.pi3.com.pl/adv/libopie-adv.txt
|
||||
CVE-2010-1938 - http://www.exploit-db.com/exploits/12762
|
||||
CVE-2010-1939 - http://h07.w.interia.pl/Safari.rar
|
||||
CVE-2010-1939 - http://reviews.cnet.com/8301-13727_7-20004709-263.html
|
||||
CVE-2010-1944 - http://packetstormsecurity.org/1005-exploits/opencimetiere-rfi.txt
|
||||
CVE-2010-1944 - http://www.exploit-db.com/exploits/12476
|
||||
CVE-2010-1945 - http://packetstormsecurity.org/1004-exploits/openfoncier-rfilfi.txt
|
||||
@@ -32508,6 +32510,9 @@ CVE-2014-5005 - http://www.exploit-db.com/exploits/34594
|
||||
CVE-2014-5006 - http://seclists.org/fulldisclosure/2014/Aug/88
|
||||
CVE-2014-5006 - http://www.exploit-db.com/exploits/34594
|
||||
CVE-2014-5007 - http://seclists.org/fulldisclosure/2014/Aug/88
|
||||
CVE-2014-5011 - https://github.com/dompdf/dompdf/compare/v0.6.1...v0.6.2
|
||||
CVE-2014-5012 - https://github.com/dompdf/dompdf/compare/v0.6.1...v0.6.2
|
||||
CVE-2014-5013 - https://github.com/dompdf/dompdf/compare/v0.6.1...v0.6.2
|
||||
CVE-2014-5016 - http://packetstormsecurity.com/files/127369/Lime-Survey-2.05-Build-140618-XSS-SQL-Injection.html
|
||||
CVE-2014-5017 - http://packetstormsecurity.com/files/127369/Lime-Survey-2.05-Build-140618-XSS-SQL-Injection.html
|
||||
CVE-2014-5018 - http://packetstormsecurity.com/files/127369/Lime-Survey-2.05-Build-140618-XSS-SQL-Injection.html
|
||||
@@ -73533,8 +73538,11 @@ CVE-2019-6116 - http://packetstormsecurity.com/files/151307/Ghostscript-Pseudo-O
|
||||
CVE-2019-6116 - http://packetstormsecurity.com/files/152367/Slackware-Security-Advisory-ghostscript-Updates.html
|
||||
CVE-2019-6116 - https://www.exploit-db.com/exploits/46242/
|
||||
CVE-2019-6120 - https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/
|
||||
CVE-2019-6120 - https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit
|
||||
CVE-2019-6121 - https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/
|
||||
CVE-2019-6121 - https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit
|
||||
CVE-2019-6122 - https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/
|
||||
CVE-2019-6122 - https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit
|
||||
CVE-2019-6126 - https://github.com/Mad-robot/CVE-List/blob/master/Advance%20Peer%20to%20Peer%20MLM%20Script.md
|
||||
CVE-2019-6128 - http://bugzilla.maptools.org/show_bug.cgi?id=2836
|
||||
CVE-2019-6128 - http://packetstormsecurity.com/files/155095/Slackware-Security-Advisory-libtiff-Updates.html
|
||||
@@ -81771,6 +81779,7 @@ CVE-2020-35745 - https://medium.com/@ashketchum/privilege-escalation-unauthentic
|
||||
CVE-2020-35745 - https://www.youtube.com/watch?v=vnSsg6iwV9Y&feature=youtu.be&ab_channel=ashketchum
|
||||
CVE-2020-35749 - http://packetstormsecurity.com/files/161050/Simple-JobBoard-Authenticated-File-Read.html
|
||||
CVE-2020-35749 - http://packetstormsecurity.com/files/165892/WordPress-Simple-Job-Board-2.9.3-Local-File-Inclusion.html
|
||||
CVE-2020-35749 - https://docs.google.com/document/d/1TbePkrRGsczepBaJptIdVRvfRrjiC5hjGg_Vxdesw6E/edit?usp=sharing
|
||||
CVE-2020-35752 - https://www.exploit-db.com/exploits/49358
|
||||
CVE-2020-35752 - https://www.sourcecodester.com/download-code?nid=14622&title=Baby+Care+System+in+PHP%2FMySQLi+with+Full+Source+Code+
|
||||
CVE-2020-35752 - https://www.sourcecodester.com/php/14622/baby-care-system-phpmysqli-full-source-code.html
|
||||
@@ -130869,6 +130878,7 @@ CVE-2025-1901 - https://github.com/chenzi-dynasty/CVE/issues/1
|
||||
CVE-2025-1902 - https://github.com/panghuanjie/Code-audits/issues/3
|
||||
CVE-2025-1903 - https://github.com/takakie/CVE/blob/main/cve_3.md
|
||||
CVE-2025-1904 - https://github.com/lokihardk/cve/blob/main/xss-2_25.md
|
||||
CVE-2025-1905 - https://vuldb.com/?id.298425
|
||||
CVE-2025-1905 - https://www.sourcecodester.com/
|
||||
CVE-2025-1906 - https://github.com/HaroldFinch-L/CVE/issues/2
|
||||
CVE-2025-1908 - https://gitlab.com/gitlab-org/gitlab/-/issues/523065
|
||||
@@ -140294,6 +140304,7 @@ CVE-2025-8840 - https://github.com/jishenghua/jshERP/issues/126
|
||||
CVE-2025-8841 - https://github.com/zlt2000/microservices-platform/issues/77
|
||||
CVE-2025-8841 - https://github.com/zlt2000/microservices-platform/issues/77#issue-3264841808
|
||||
CVE-2025-8842 - https://drive.google.com/file/d/11vEV1vMHXO4BrDGhvWAMm0Qo1woiUwVV/view?usp=drive_link
|
||||
CVE-2025-8842 - https://vuldb.com/?submit.623184
|
||||
CVE-2025-8843 - https://drive.google.com/file/d/1JRHWdjW6FGHDV0CMJe8VinmCQ4vP9ZpR/view?usp=drive_link
|
||||
CVE-2025-8844 - https://drive.google.com/file/d/10TSdMErFTBtLFIwfh_fia635cmtmFuei/view?usp=drive_link
|
||||
CVE-2025-8844 - https://vuldb.com/?submit.623187
|
||||
@@ -141963,6 +141974,7 @@ CVE-2026-15043 - https://metacpan.org/release/HMBRAND/DBI-1.651/changes
|
||||
CVE-2026-1505 - https://vuldb.com/?id.343117
|
||||
CVE-2026-15058 - https://devolutions.net/security/advisories/DEVO-2026-0024/
|
||||
CVE-2026-1508 - https://wpscan.com/vulnerability/fc1d577b-abf9-4c15-a96d-14ebd894debc/
|
||||
CVE-2026-15135 - https://vuldb.com/submit/851065
|
||||
CVE-2026-15164 - https://gitlab.com/wireshark/wireshark/-/work_items/21375
|
||||
CVE-2026-15165 - https://gitlab.com/wireshark/wireshark/-/work_items/21390
|
||||
CVE-2026-15166 - https://gitlab.com/wireshark/wireshark/-/work_items/21391
|
||||
@@ -143557,6 +143569,7 @@ CVE-2026-27749 - https://blog.quarkslab.com/avira-deserialize-delete-and-escalat
|
||||
CVE-2026-27749 - https://www.gendigital.com/us/en/contact-us/security-advisories/
|
||||
CVE-2026-27750 - https://blog.quarkslab.com/avira-deserialize-delete-and-escalate-the-proper-way-to-use-an-av.html
|
||||
CVE-2026-27750 - https://www.gendigital.com/us/en/contact-us/security-advisories/
|
||||
CVE-2026-2776 - https://bugzilla.mozilla.org/show_bug.cgi?id=2015266
|
||||
CVE-2026-27760 - https://chocapikk.com/posts/2026/opencats-installer-rce/
|
||||
CVE-2026-27760 - https://www.vulncheck.com/advisories/opencats-php-code-injection-via-installer-ajax-endpoint
|
||||
CVE-2026-27769 - https://mattermost.com/security-updates
|
||||
@@ -143616,6 +143629,7 @@ CVE-2026-27967 - https://github.com/zed-industries/zed/security/advisories/GHSA-
|
||||
CVE-2026-27973 - https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-2433-p93m-xhhg
|
||||
CVE-2026-27974 - https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-8c9r-pvrj-vcf5
|
||||
CVE-2026-27976 - https://github.com/zed-industries/zed/security/advisories/GHSA-59p4-3mhm-qm3r
|
||||
CVE-2026-2806 - https://bugzilla.mozilla.org/show_bug.cgi?id=2006199
|
||||
CVE-2026-2820 - https://github.com/luoye197-prog/cve-yinda-sql/blob/main/poc.py
|
||||
CVE-2026-28207 - https://f0nduesav0yarde.github.io/blog/vulnerabilities/cve-2026-28207/
|
||||
CVE-2026-28207 - https://github.com/z-libs/Zen-C/security/advisories/GHSA-9rff-x96h-76h2
|
||||
@@ -145315,8 +145329,11 @@ CVE-2026-40027 - https://github.com/abrignoni/aleapp/pull/669
|
||||
CVE-2026-40029 - https://github.com/khyrenz/parseusbs/pull/10
|
||||
CVE-2026-40030 - https://github.com/khyrenz/parseusbs/pull/10
|
||||
CVE-2026-40032 - https://github.com/tclahr/uac/pull/443
|
||||
CVE-2026-40033 - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-p6r2-4hgm-m6ff
|
||||
CVE-2026-40034 - https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-f26g-jm89-4g65
|
||||
CVE-2026-40034 - https://red.anthropic.com/2026/cvd/findings/ANT-2026-6SNS6KMP
|
||||
CVE-2026-40035 - https://github.com/obsidianforensics/unfurl/security/advisories/GHSA-vg9h-jx4v-cwx2
|
||||
CVE-2026-40036 - https://github.com/obsidianforensics/unfurl/security/advisories/GHSA-h5qv-qjv4-pc5m
|
||||
CVE-2026-40038 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5980.php
|
||||
CVE-2026-40039 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5981.php
|
||||
CVE-2026-40040 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5982.php
|
||||
@@ -145333,9 +145350,12 @@ CVE-2026-4008 - https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-w3-formwrlS
|
||||
CVE-2026-4008 - https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-w3-formwrlSSIDset-index-buffer-overflow
|
||||
CVE-2026-40082 - https://github.com/Cacti/cacti/security/advisories/GHSA-273r-qr93-wgcp
|
||||
CVE-2026-40083 - https://github.com/Cacti/cacti/security/advisories/GHSA-j9jv-6xjq-9hhj
|
||||
CVE-2026-40084 - https://github.com/Cacti/cacti/security/advisories/GHSA-mjvw-mhj5-9jcj
|
||||
CVE-2026-40086 - https://github.com/danielgatis/rembg/security/advisories/GHSA-3wqj-33cg-xc48
|
||||
CVE-2026-40100 - https://github.com/labring/FastGPT/security/advisories/GHSA-jrhc-f3j7-f8g4
|
||||
CVE-2026-40103 - https://github.com/go-vikunja/vikunja/security/advisories/GHSA-v479-vf79-mg83
|
||||
CVE-2026-40106 - https://github.com/wazuh/wazuh/security/advisories/GHSA-qvrc-pcfc-jhqc
|
||||
CVE-2026-40107 - https://github.com/siyuan-note/siyuan/security/advisories/GHSA-w95v-4h65-j455
|
||||
CVE-2026-40111 - https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-v7px-3835-7gjx
|
||||
CVE-2026-40112 - https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cfg2-mxfj-j6pw
|
||||
CVE-2026-40113 - https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-fvxx-ggmx-3cjg
|
||||
@@ -145357,6 +145377,8 @@ CVE-2026-40170 - http://www.openwall.com/lists/oss-security/2026/04/17/12
|
||||
CVE-2026-40170 - https://github.com/ngtcp2/ngtcp2/security/advisories/GHSA-f523-465f-8c8f
|
||||
CVE-2026-40173 - https://github.com/dgraph-io/dgraph/security/advisories/GHSA-95mq-xwj4-r47p
|
||||
CVE-2026-40180 - https://github.com/quarkiverse/quarkus-openapi-generator/security/advisories/GHSA-jx2w-vp7f-456q
|
||||
CVE-2026-40186 - https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-9mrh-v2v3-xpfm
|
||||
CVE-2026-40188 - https://github.com/patrickhener/goshs/security/advisories/GHSA-2943-crp8-38xx
|
||||
CVE-2026-40190 - https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-fw9q-39r9-c252
|
||||
CVE-2026-40194 - https://github.com/phpseclib/phpseclib/security/advisories/GHSA-r854-jrxh-36qx
|
||||
CVE-2026-40195 - https://github.com/lxc/incus/security/advisories/GHSA-gc7j-g665-rxr9
|
||||
@@ -145368,9 +145390,11 @@ CVE-2026-40230 - https://fluidattacks.com/es/advisories/prisioneros
|
||||
CVE-2026-40242 - https://github.com/getarcaneapp/arcane/security/advisories/GHSA-ff24-4prj-gpmj
|
||||
CVE-2026-40243 - https://github.com/lxc/incus/security/advisories/GHSA-c839-4qxr-j4x3
|
||||
CVE-2026-40245 - https://github.com/free5gc/free5gc/security/advisories/GHSA-wrwh-rpq4-87hf
|
||||
CVE-2026-40247 - https://github.com/free5gc/free5gc/security/advisories/GHSA-x5r2-r74c-3w28
|
||||
CVE-2026-40248 - https://github.com/free5gc/free5gc/security/advisories/GHSA-jgq2-qv8v-5cmj
|
||||
CVE-2026-40251 - https://github.com/lxc/incus/security/advisories/GHSA-4m88-wxj4-9qj6
|
||||
CVE-2026-40252 - https://github.com/labring/FastGPT/security/advisories/GHSA-gc8m-w37w-24hw
|
||||
CVE-2026-40253 - https://github.com/opencryptoki/opencryptoki/security/advisories/GHSA-c9cf-6vr4-wfxm
|
||||
CVE-2026-40259 - https://github.com/siyuan-note/siyuan/security/advisories/GHSA-7m5h-w69j-qggg
|
||||
CVE-2026-40262 - https://github.com/enchant97/note-mark/security/advisories/GHSA-9pr4-rf97-79qh
|
||||
CVE-2026-40263 - https://github.com/enchant97/note-mark/security/advisories/GHSA-w6m9-39cv-2fwp
|
||||
@@ -145379,6 +145403,7 @@ CVE-2026-40279 - https://github.com/bacnet-stack/bacnet-stack/security/advisorie
|
||||
CVE-2026-40284 - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-mccp-8446-phw5
|
||||
CVE-2026-40286 - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-42rc-rvrx-cmmw
|
||||
CVE-2026-40287 - https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-g985-wjh9-qxxc
|
||||
CVE-2026-40289 - https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-8x8f-54wf-vv92
|
||||
CVE-2026-40290 - https://github.com/OP-TEE/optee_os/security/advisories/GHSA-332c-xr93-849m
|
||||
CVE-2026-40296 - https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-hrmw-qprp-wgmc
|
||||
CVE-2026-40300 - https://github.com/zulip/zulip/security/advisories/GHSA-jp8f-mvv6-89cr
|
||||
@@ -145388,6 +145413,7 @@ CVE-2026-40314 - https://github.com/NamelessMC/Nameless/security/advisories/GHSA
|
||||
CVE-2026-40315 - https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x783-xp3g-mqhp
|
||||
CVE-2026-40317 - https://github.com/MinecAnton209/NovumOS/security/advisories/GHSA-xjx3-gjh9-45fm
|
||||
CVE-2026-40322 - https://github.com/siyuan-note/siyuan/security/advisories/GHSA-x63q-3rcj-hhp5
|
||||
CVE-2026-40348 - https://github.com/leepeuker/movary/security/advisories/GHSA-2m2v-v563-qqvj
|
||||
CVE-2026-40349 - https://github.com/leepeuker/movary/security/advisories/GHSA-mcfq-8rx7-w25v
|
||||
CVE-2026-40352 - https://github.com/labring/FastGPT/security/advisories/GHSA-422w-vrfj-72g6
|
||||
CVE-2026-40353 - https://github.com/wger-project/wger/security/advisories/GHSA-6f54-qjvm-wwq3
|
||||
@@ -145409,6 +145435,7 @@ CVE-2026-40496 - https://github.com/freescout-help-desk/freescout/security/advis
|
||||
CVE-2026-40497 - https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-fh99-wr77-pxq3
|
||||
CVE-2026-40499 - https://blog.calif.io/p/mad-bugs-discovering-a-0-day-in-zero
|
||||
CVE-2026-40500 - https://gist.github.com/thepiyushkumarshukla/7514e5eed526fd9d20fcfc42ce8d0a82
|
||||
CVE-2026-40501 - https://gist.github.com/Mundi-Xu/99af1b08275fd437cfb79bfe481e68b7
|
||||
CVE-2026-40515 - https://github.com/HKUDS/OpenHarness/pull/92
|
||||
CVE-2026-40516 - https://github.com/HKUDS/OpenHarness/pull/92
|
||||
CVE-2026-40517 - https://blog.calif.io/p/mad-bugs-discovering-a-0-day-in-zero
|
||||
@@ -145422,6 +145449,7 @@ CVE-2026-40567 - https://github.com/freescout-help-desk/freescout/security/advis
|
||||
CVE-2026-40569 - https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-hmqm-33wp-858j
|
||||
CVE-2026-40571 - https://github.com/NamelessMC/Nameless/security/advisories/GHSA-47hr-jj6c-rqf9
|
||||
CVE-2026-40572 - https://github.com/MinecAnton209/NovumOS/security/advisories/GHSA-rg7m-6vh7-f4v2
|
||||
CVE-2026-40576 - https://github.com/haris-musa/excel-mcp-server/security/advisories/GHSA-j98m-w3xp-9f56
|
||||
CVE-2026-40584 - https://vulnerability.circl.lu/vuln/gcve-1-2026-0025
|
||||
CVE-2026-40585 - https://github.com/blueprintue/blueprintue-self-hosted-edition/security/advisories/GHSA-qr65-6vp8-whjf
|
||||
CVE-2026-40586 - https://github.com/blueprintue/blueprintue-self-hosted-edition/security/advisories/GHSA-m6c2-6p3h-8jv2
|
||||
@@ -145451,6 +145479,7 @@ CVE-2026-40882 - https://github.com/openremote/openremote/security/advisories/GH
|
||||
CVE-2026-40883 - https://github.com/patrickhener/goshs/security/advisories/GHSA-jrq5-hg6x-j6g3
|
||||
CVE-2026-40886 - https://github.com/argoproj/argo-workflows/security/advisories/GHSA-5jv8-h7qh-rf5p
|
||||
CVE-2026-40893 - https://github.com/gotenberg/gotenberg/security/advisories/GHSA-62p3-hvxx-fxg4
|
||||
CVE-2026-40901 - https://github.com/dataease/dataease/security/advisories/GHSA-gm5q-g72w-c466
|
||||
CVE-2026-40904 - https://github.com/chartbrew/chartbrew/security/advisories/GHSA-jq95-gqww-vhm3
|
||||
CVE-2026-40906 - https://github.com/electric-sql/electric/security/advisories/GHSA-h5rg-pxx7-r2hj
|
||||
CVE-2026-40907 - https://github.com/WWBN/AVideo/security/advisories/GHSA-gpgp-w4x2-h3h7
|
||||
@@ -146142,6 +146171,7 @@ CVE-2026-44418 - https://github.com/phili67/ecclesiacrm/security/advisories/GHSA
|
||||
CVE-2026-4442 - https://issues.chromium.org/issues/484751092
|
||||
CVE-2026-44420 - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mvpx-xj7r-3p3r
|
||||
CVE-2026-44420 - https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-h6wq-j5mv-f3q8
|
||||
CVE-2026-44421 - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-p6r2-4hgm-m6ff
|
||||
CVE-2026-44422 - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-j9q5-7g8m-jc9v
|
||||
CVE-2026-44424 - https://github.com/shellhub-io/shellhub/security/advisories/GHSA-j72x-xfwg-783f
|
||||
CVE-2026-44425 - https://github.com/shellhub-io/shellhub/security/advisories/GHSA-47r2-v3x6-wff9
|
||||
@@ -147162,8 +147192,10 @@ CVE-2026-5346 - https://github.com/wing3e/public_exp/issues/11
|
||||
CVE-2026-53520 - https://github.com/nezhahq/nezha/security/advisories/GHSA-x6fg-52vr-hj4w
|
||||
CVE-2026-5362 - https://fluidattacks.com/es/advisories/mago
|
||||
CVE-2026-5368 - https://vuldb.com/submit/781665
|
||||
CVE-2026-53742 - https://www.vulncheck.com/advisories/simple-link-directory-through-stored-xss-via-embed-shortcode-attributes
|
||||
CVE-2026-5385 - https://fluidattacks.com/es/advisories/bizkit
|
||||
CVE-2026-5394 - https://fluidattacks.com/es/advisories/dragons
|
||||
CVE-2026-53994 - https://www.vulncheck.com/advisories/proftpd-mod-sftp-heap-buffer-overflow-via-unsigned-integer-underflow-and-size-truncation
|
||||
CVE-2026-5402 - https://gitlab.com/wireshark/wireshark/-/issues/21090
|
||||
CVE-2026-5402 - https://gitlab.com/wireshark/wireshark/-/work_items/21090
|
||||
CVE-2026-5403 - https://gitlab.com/wireshark/wireshark/-/issues/21103
|
||||
@@ -147498,6 +147530,7 @@ CVE-2026-6298 - https://issues.chromium.org/issues/495700484
|
||||
CVE-2026-6300 - https://issues.chromium.org/issues/491994185
|
||||
CVE-2026-6301 - https://issues.chromium.org/issues/495273999
|
||||
CVE-2026-6302 - https://issues.chromium.org/issues/495477995
|
||||
CVE-2026-6304 - https://issues.chromium.org/issues/496393742
|
||||
CVE-2026-6305 - https://issues.chromium.org/issues/496618639
|
||||
CVE-2026-6306 - https://issues.chromium.org/issues/496907110
|
||||
CVE-2026-6307 - https://issues.chromium.org/issues/497404188
|
||||
@@ -147834,6 +147867,7 @@ CVE-2026-7676 - https://vuldb.com/submit/800723
|
||||
CVE-2026-7677 - https://vuldb.com/vuln/360830
|
||||
CVE-2026-7677 - https://vuldb.com/vuln/360830/cti
|
||||
CVE-2026-7678 - https://github.com/9str0IL/CVE/issues/2
|
||||
CVE-2026-7683 - https://vuldb.com/vuln/360842/cti
|
||||
CVE-2026-7686 - https://github.com/xryj920/CVE/blob/main/adblock_plus_CVE_report.md
|
||||
CVE-2026-7689 - https://gist.github.com/Shaon-Xis/d6ae069fc54f006457b68a91d5a8e158
|
||||
CVE-2026-7697 - https://github.com/testnet0/testnet/issues/74
|
||||
|
||||
Reference in new issue
Block a user