20921 matches found
WellChoose IFTOP 安全漏洞
WellChoose IFTOP is a command-line network traffic monitoring tool for collecting network traffic statistics from WellChoose, a company based in Taiwan, China. WellChoose IFTOP has a security vulnerability caused by reflective cross-site scripting. This vulnerability could allow authenticated...
Top Password Outlook Password Recovery 缓冲区错误漏洞
Top Password Outlook Password Recovery is a password recovery tool developed by Top Password. Version 2.10 of Top Password Outlook Password Recovery has a buffer error vulnerability. This vulnerability stems from buffer overflows in the username and registration code fields, which could allow loc...
WellChoose IFTOP 输入验证错误漏洞
WellChoose IFTOP is a command-line network traffic monitoring tool for network traffic statistics provided by WellChoose, a company based in Taiwan, China. WellChoose IFTOP has a vulnerability related to input validation. This vulnerability stems from an open redirection vulnerability, which may...
WireMCP 操作系统命令注入漏洞
WireMCP is a real-time network traffic analysis tool developed by Koda’s individual developers. WireMCP has a vulnerability related to operating system command injection. This vulnerability stems from incorrect operations on the server.tool function in the Tshark CLI Command Handler component,...
elecV2P 代码注入漏洞
elecV2P is a network request modification and scheduled task tool developed by the elecV2 individual developer. Versions of elecV2P 3.8.3 and earlier have a code injection vulnerability. This vulnerability stems from incorrect operations on the runJSFile function in the jsfile Endpoint’s source...
list-sync 代码问题漏洞
List-Sync is a tool developed by WoahAI personal developers, used for automatically syncing media servers with viewing lists. Versions of List-Sync 0.6.6 and earlier have code vulnerabilities. These vulnerabilities stem from incorrect operations in the requests.post function of the component’s JS...
Linux Distros Unpatched Vulnerability : CVE-2026-30930
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, The TimescaleDB export module constructs SQL queries using string concatenation...
ThermaKube 安全漏洞
ThermaKube is a Kubernetes cluster monitoring and visualization tool released as a beta version by Open Source Labs. There is a security vulnerability in ThermaKube, which stems from the use of hard-coded passwords...
Arbitrary Code Injection
Overview @siteboon/claude-code-ui is an A web-based UI for Claude Code CLI Affected versions of this package are vulnerable to Arbitrary Code Injection in the git-config endpoint due to improper sanitization of user-supplied input in shell command construction. An attacker can execute arbitrary O...
EUVD-2026-10403
node-tar Symlink Path Traversal via Drive-Relative Linkpath...
CVE-2026-27826
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to version 0.17.0, an unauthenticated attacker who can reach the mcp-atlassian HTTP endpoint can force the server process to make outbound HTTP requests to an arbitrary attacker-controlled URL b...
GO-2026-4643 WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora
WeKnora has DNS Rebinding Vulnerability in webfetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora...
GO-2026-4638 WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora...
GO-2026-4641 WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora...
CVE-2026-30930
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, The TimescaleDB export module constructs SQL queries using string concatenation with unsanitized system monitoring data. The normalize method wraps string values in single quotes but does not escape embedded single...
CVE-2026-30928
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, the /api/4/config REST API endpoint returns the entire parsed Glances configuration file glances.conf via self.config.asdict with no filtering of sensitive values. The configuration file contains credentials for all...
EUVD-2026-10542
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, The TimescaleDB export module constructs SQL queries using string concatenation with unsanitized system monitoring data. The normalize method wraps string values in single quotes but does not escape embedded single...
Exploit for OS Command Injection in Gl-Inet Gl-Mt300N-V2_Firmware
GL-InjectoR: CVE-2022-31898 Authenticated Command Injection in...