59086 matches found
uutils coreutils 安全漏洞
uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. uutils coreutils has a security vulnerability, which stems from a logical error in the ln function. This vulnerability could allow local attackers to manipulate existing symbolic links, redirecting fil...
CVE-2026-40343
CVE-2026-40343 concerns free5GC UDR (user data repository) in versions up to and including 1.4.2. The issue is a fail‑open handling flaw in the POST handler for /nudr-dr/v2/policy-data/subs-to-notify: after errors reading the request body or deserializing input, the handler does not terminate and...
CVE-2026-40343 free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creation
free5GC UDR is the user data repository UDR for free5GC, an an open-source project for 5th generation 5G mobile core networks. In versions up to and including 1.4.2, a fail-open request handling flaw in the UDR service causes the /nudr-dr/v2/policy-data/subs-to-notify POST handler to continue...
GHSA-4CWV-5285-63V9
creationtimestamp| type| source ---|---|--- 2026-04-21 23:30:49+00:00| seen| Telegram/WzFh75qC0rKhc-ksOtYvdTuNUy7-5M1wjcl5aTvCRw8jriM...
GHSA-4C3Q-X735-J3R5
creationtimestamp| type| source ---|---|--- 2026-04-21 23:30:49+00:00| seen| Telegram/WzFh75qC0rKhc-ksOtYvdTuNUy7-5M1wjcl5aTvCRw8jriM...
CVE-2026-34305
creationtimestamp| type| source ---|---|--- 2026-04-21 23:29:48+00:00| seen| Telegram/DVTWZmGG1qCJe-0IJfQ1HXgYFTwgnUj24suPZSIXyV8Y 2026-04-22 12:50:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwqt6xo2w 2026-04-22 23:31:13+00:00| seen|...
CVE-2026-34292
creationtimestamp| type| source ---|---|--- 2026-04-21 23:29:48+00:00| seen| Telegram/DVTWZmGG1qCJe-0IJfQ1HXgYFTwgnUj24suPZSIXyV8Y 2026-04-22 12:50:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwqt6xo2w...
CVE-2026-34286
creationtimestamp| type| source ---|---|--- 2026-04-21 23:29:42+00:00| seen| Telegram/aMi2LuBEIXJnsV5m6CV4ivBB7xOt9ZZP3DifvdMTwaEDzZM 2026-04-22 23:47:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4on2o4442l 2026-06-02 03:37:07+00:00| seen|...
CVE-2026-21997
creationtimestamp| type| source ---|---|--- 2026-04-21 23:29:27+00:00| seen| Telegram/da4bvWuFIBZ1xbJCq39UTLrDihlERi1UO8pjihG32T1Z-BM...
CVE-2026-6829
nesquena hermes-webui contains a trust-boundary failure vulnerability that allows authenticated attackers to set or change a session workspace to an arbitrary existing directory on disk by manipulating workspace path parameters in endpoints such as /api/session/new, /api/session/update,...
CVE-2026-40928 AVideo: Missing CSRF Protection on State-Changing JSON Endpoints Enables Forced Comment Creation, Vote Manipulation, and Category Asset Deletion
WWBN AVideo is an open source video platform. In versions 29.0 and prior, multiple AVideo JSON endpoints under objects/ accept state-changing requests via $REQUEST/$GET and persist changes tied to the caller's session user, without any anti-CSRF token, origin check, or referer check. A malicious...
CVE-2026-40928
WWBN AVideo (versions ≤ 29.0) exposes state-changing JSON endpoints under objects/ without CSRF protection or origin/referer checks. A logged-in user can be coerced to perform actions via attacker-controlled HTML: like/dislike comments (objects/comments_like.json.php), post comments with attacker...
CVE-2026-40928 AVideo: Missing CSRF Protection on State-Changing JSON Endpoints Enables Forced Comment Creation, Vote Manipulation, and Category Asset Deletion
WWBN AVideo is an open source video platform. In versions 29.0 and prior, multiple AVideo JSON endpoints under objects/ accept state-changing requests via $REQUEST/$GET and persist changes tied to the caller's session user, without any anti-CSRF token, origin check, or referer check. A malicious...
EUVD-2026-24341
Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft component: Absence Management. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...
GHSA-C29W-QQ4M-2GCV
creationtimestamp| type| source ---|---|--- 2026-04-21 21:27:12+00:00| seen| Telegram/F2G63fMNgyZcc0oNt6XGHExAkvTr9kUyS9C9Ki-AIDnnQ5g...
CVE-2026-40880
creationtimestamp| type| source ---|---|--- 2026-04-21 21:27:12+00:00| seen| Telegram/F2G63fMNgyZcc0oNt6XGHExAkvTr9kUyS9C9Ki-AIDnnQ5g...
CVE-2026-40879
creationtimestamp| type| source ---|---|--- 2026-04-21 21:27:12+00:00| seen| Telegram/F2G63fMNgyZcc0oNt6XGHExAkvTr9kUyS9C9Ki-AIDnnQ5g...
GHSA-7H3J-592V-JCRP
creationtimestamp| type| source ---|---|--- 2026-04-21 21:27:12+00:00| seen| Telegram/F2G63fMNgyZcc0oNt6XGHExAkvTr9kUyS9C9Ki-AIDnnQ5g...