EUVD-2026-57451

SiYuan v3.7.4-alpha.1 a pre-release; the endpoint does not exist in stable v3.7.3 or earlier contains an information disclosure vulnerability in the /api/av/getAttributeViewFieldViews endpoint. The route is registered with CheckAuth only and applies no publish-access filtering, so reader-role...

CVE-2026-72791

SiYuan v3.7.4-alpha.1 contains an information-disclosure flaw in the /api/av/getAttributeViewFieldViews endpoint. The route is registered with CheckAuth only and lacks publish-access filtering, allowing reader-role callers to view the complete database view structure (view names, icons, layout ty...

EUVD-2026-25184

CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface...

How to take a XenServer toolstack (XAPI) database dump and view it

XenServer stores the vital information related to objects such asVM, VIF, VDI, PBD in an XMLformat file under /var/xapi/state.db.Thisfile is synced between pool membersat regular intervals to maintain aconsistent view of the XenServer pool. We recommend that you back up this XAPIdatabase file. Th...