87287 matches found
CVE-2026-103757 Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation
Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts uses raw node-fetch instead of fetchWithBlacklist. Authenticated builder users can send a prompt to POST /api/ai/tables...
EUVD-2026-90684
Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. Attackers can point image cards at attacker-controlled hosts or internal network...
CVE-2026-103291 Ghost 3.20.2 before 6.51.0 SSRF via image-size fetch
Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. Attackers can point image cards at attacker-controlled hosts or internal network...
EUVD-2026-90680
Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that allows staff users to probe internal hosts. Attackers with staff privileges can craft webhook requests to access internal network resources from the Ghost server...
CVE-2026-103287 Ghost 1.18.0 before 6.27.0 Server-Side Request Forgery via Webhook
Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that allows staff users to probe internal hosts. Attackers with staff privileges can craft webhook requests to access internal network resources from the Ghost server...
CVE-2026-103283
Ghost versions 6.20.0 before 6.57.1 are affected by a session handling vulnerability. This flaw allows authenticated staff users to log in as any other staff member by providing only a password, effectively bypassing two-factor authentication . Attackers with valid staff credentials can exploit t...
CVE-2026-103265
Fleet versions before 4.89.0 are vulnerable to an information disclosure flaw in the commands/results endpoint. The root cause is a failure to properly filter MDM command results by team authorization. Consequently, team-scoped users can access MDM command results for hosts belonging to other tea...
EUVD-2026-90579
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues...
CVE-2022-40684
CVE-2022-40684 CVE-2022-40684 - 认证绕过，提取管理员用户和LDAP配置 - 此PoC仅执行只读操作。 运行漏洞利用 USE: python3 exploit.py https://target.com Ex: python3 exploit.py https://target.com 运行nuclei模板 echo https://target.com | nuclei -t CVE-2022-40684.yaml...
Rocky Linux 9 [CIQ] Security Update: bpftrace / bpftrace-debuginfo / bpftrace-debugsource (crlsa-2024_9188)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20249188 advisory. bpftrace: unprivileged users can force loading of compromised linux headers CVE-2024-2313 Tenable has extracted the preceding description block directly from the CI...
AlmaLinux 9.2 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc (ALMALINUX9.2:CLSA-2025:1751143797)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1751143797 advisory. - A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper...
rsync: rsync: Authorization bypass via `auth users` directive parsing
An authorization bypass flaw was found in the rsync daemon. The auth users directive parser incorrectly handles group names containing spaces due to comma-only tokenization. This flaw causes deny rules to be silently discarded, allowing an authenticated user to bypass restrictions and gain...
CVE-2026-102106
Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administrative service in Kiteworks Email Protection Gateway did not consistently enforce administrator authentication, so the required password check could be bypassed. An attacker who referenced a valid...
CVE-2026-102106 Kiteworks Email Protection Gateway improper authentication
Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administrative service in Kiteworks Email Protection Gateway did not consistently enforce administrator authentication, so the required password check could be bypassed. An attacker who referenced a valid...
CVE-2026-76460
CVE-2026-76460 本项目演示了一个受 CVE-2026-76460 启发的模拟身份验证绕过场景。该实验环境有意设计为教育性和安全性：它是一个本地 Flask API，模拟存在漏洞和已修补的行为，而不针对真实系统。 目标 该应用程序展示了特权管理 API 如何在缺乏身份验证控制的情况下被暴露，以及安全实现如何阻止未经身份验证的访问。 项目架构 flowchart LR ClientLocal client or test harness -- Entryapp.py Entry -- Factorysecuritylab.factory Factory -- ModeLab...
CVE-2026-100276
In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action...
CVE-2026-100258
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...
EUVD-2026-90002
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...