CVE-2026-55726

CVE-2026-55726: 公開リスト可能なAzure Blob Storageコンテナ（デバイスログ） アドバイザリ フィールド| 値 ---|--- CVE| CVE-2026-55726 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.3 中 Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Vector 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CWE| CWE-497...

CVE-2026-66906

CVE-2026-66906 — camel-azure-storage-blob downloadBlobToFile パストラバーサル 同じ Apache Camel 脆弱性の実行可能な Proof-of-Concept 再現コードです。ランタイムごとに 1 つ用意しています: ランタイム| ディレクトリ| スタック ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-azure-storage-blob 4.18.2 Camel Quarkus| camel-quarkus/|...

CVE-2026-78860

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...

CVE-2026-105679

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

CVE-2026-105686 Penpot: Repeated chunk index causes temporary-storage amplification

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the chunked media upload RPC validates that a chunk index is in range but neither rejects an already stored index nor replaces its previous object. An authenticated user can repeatedly upload the same valid index, causing...

EUVD-2026-92779

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the chunked media upload RPC validates that a chunk index is in range but neither rejects an already stored index nor replaces its previous object. An authenticated user can repeatedly upload the same valid index, causing...

CVE-2026-105686 Penpot: Repeated chunk index causes temporary-storage amplification

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the chunked media upload RPC validates that a chunk index is in range but neither rejects an already stored index nor replaces its previous object. An authenticated user can repeatedly upload the same valid index, causing...

CVE-2026-105686

The open-source design and prototyping platform Penpot is vulnerable to temporary-storage amplification in versions prior to 2.18.0 . The issue exists within the chunked media upload RPC , which fails to reject or replace previously stored chunk indexes. An authenticated user can repeatedly uploa...

CVE-2026-105686 Penpot: Repeated chunk index causes temporary-storage amplification

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the chunked media upload RPC validates that a chunk index is in range but neither rejects an already stored index nor replaces its previous object. An authenticated user can repeatedly upload the same valid index, causing...

CVE-2026-105679 Ghost: Stored XSS via File Uploads on Local Storage

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

CVE-2026-105679 Ghost: Stored XSS via File Uploads on Local Storage

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

CVE-2026-105679

The Ghost Node.js content management system is vulnerable to Stored XSS in versions 6.22.1 through 6.64.0 . The root cause is that the restriction on content types for uploaded files is not applied when using the default local storage adapter , allowing files to be served with content types deriv...

CVE-2026-105679 Ghost: Stored XSS via File Uploads on Local Storage

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

CVE-2026-105679

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

cve-2022-23131

cve-2022-23131 cve-2022-23131 zabbix-saml-bypass-exp 1. 将 zbxsignedsession 替换为 cookie 2. 使用单点登录（SAML）登录 作者：@random-robbie、@jweny 和 @Mr-xn 链接：https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage...

CyberQRM

CyberQRM – 사이버 정량적 위험 관리 로컬에서 실행되는 오픈소스 플랫폼으로, FAIR v3.1정보 위험 요인 분석 프레임워크를 사용한 정량적 사이버 보안 위험 평가 를 제공합니다. 위협 모델링, 몬테카를로 시뮬레이션 실행, 통제 효과 측정, 위험 포트폴리오 관리 — 모두 브라우저에서 가능하며 클라우드 계정이 필요 없습니다. 기능 FAIR 기반 위험 모델링 — 각 시나리오에 대해 Threat Event Frequency, Vulnerability, Asset Value, Loss Event Impact를 삼각 분포, 로그...

CVE-2024-24488

CVE-2024-24488 Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 には、ローカル攻撃者がパスワードコンポーネントを介して機密情報を取得できる問題があります。 テスト済みバージョン CP3V2.0 - V11.10.00.2311090948 CWE CWE-313: ファイルまたはディスク上での平文保存 脆弱性の概要...

cve-2022-21877

POC CVE-2022-21877 此仓库包含针对 CVE-2022-21877 的概念验证（POC），由 Quang Linh 发现，他任职于 STAR Labs。这是一个在 spaceport.sys 驱动程序中发现的的信息泄露漏洞。 相关的博客文章可在以下地址找到。 使用方法 要构建 POC，只需运行 .\build。 要运行它，你的机器上需要有一个可以分配 Tier 的存储池。在我的测试中，这意味着至少需要两个存储池：一个初始池和另一个池。这是因为初始池无法附加 Tier。 要获得必要的配置，你可以在虚拟机上设置 3...

Security Bulletin: Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in multer

Summary Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in multer. CVE-2026-77037, CVE-2026-77063, CVE-2026-77078, CVE-2026-82333 The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-77037 DESCRIPTION: multer is a middleware for handling...

Dell has uncovered vulnerabilities in container storage modules

Dell has addressed the vulnerabilities in Container Storage Modules version 1.18.0 and later. These vulnerabilities reside in Dell Container Storage Modules CSM, which are used for integrating Dell storage systems with container platforms such as Kubernetes and OpenShift. The identified...