AnythingLLM 后置链接漏洞

AnythingLLM is an integrated AI application developed by Mintplex. Versions of AnythingLLM prior to 1.13.0 contained a post-link vulnerability. This vulnerability stemmed from the file system replication tool only verifying the top-level source and target paths. The recursive replication assistan...

CVE-2026-8360

creationtimestamp| type| source ---|---|--- 2026-05-27 23:02:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmumgrpokt2e 2026-05-28 04:18:30+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-disponibili-poc-per-nuove-vulnerabilita-in-triofox...

CVE-2026-8364

creationtimestamp| type| source ---|---|--- 2026-05-27 23:01:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmumgdfycu2z 2026-05-28 04:18:30+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-disponibili-poc-per-nuove-vulnerabilita-in-triofox...

CVE-2026-46416

creationtimestamp| type| source ---|---|--- 2026-05-27 22:50:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmulrwi3e22p...

CVE-2026-8363

creationtimestamp| type| source ---|---|--- 2026-05-27 22:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj45tjn52z 2026-05-28 04:18:30+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-disponibili-poc-per-nuove-vulnerabilita-in-triofox...

CVE-2026-44709

creationtimestamp| type| source ---|---|--- 2026-05-27 22:02:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj3vojqv2q...

CVE-2026-45083

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From 4.8.0 to before 26.04.1, the Goobi viewer REST endpoint POST /api/v1/index/stream accepted an arbitrary Solr streaming expression from unauthenticated network clients and forwarded it to th...

CVE-2026-9712

creationtimestamp| type| source ---|---|--- 2026-05-27 20:15:46+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mmud5hme4r2y 2026-05-28 00:05:03+00:00| seen| https://bsky.app/profile/nixpkgs-prs-bot.bsky.social/post/3mmupxgygio2d...

CVE-2026-9400

A flaw has been found in Edimax BR-6675nD 1.12. This issue affects the function formUSBStorage of the file /goform/formUSBStorage of the component POST Request Handler. Executing a manipulation of the argument subdir can lead to command injection. It is possible to launch the attack remotely. The...

CVE-2026-45719

creationtimestamp| type| source ---|---|--- 2026-05-27 19:08:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmu7fpio442c...

CVE-2026-45090

Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, ParameterAnalysis in pkg/scanning/parameterAnalysis.go runs two sequential worker stages that both write to the same results channel. The channel is correctly closed after the first stage completes...

EUVD-2026-32615

Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is started in REST API server mode dalfox server, the server binds to 0.0.0.0:6664 by default and requires no API key unless the operator explicitly passes --api-key. Because model.Options...

CVE-2026-45087 Dalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode

Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is started in REST API server mode dalfox server, the server binds to 0.0.0.0:6664 by default and requires no API key unless the operator explicitly passes --api-key. Because model.Options...

CVE-2026-49054

Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Post Grid: from n/a through 7.9.2...

CVE-2026-44971

creationtimestamp| type| source ---|---|--- 2026-05-27 17:02:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtyefixwt2n...

CVE-2026-6957

creationtimestamp| type| source ---|---|--- 2026-05-27 17:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtyadw3ka2r 2026-06-03 03:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mne6m5ubpi22...

CVE-2026-46624

creationtimestamp| type| source ---|---|--- 2026-05-27 16:37:41+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmtwwhceoy2u...

CVE-2026-9704

creationtimestamp| type| source ---|---|--- 2026-05-27 16:23:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtw673e7s2i 2026-05-28 07:46:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116651091197554066...

CVE-2026-7097

creationtimestamp| type| source ---|---|--- 2026-05-27 16:07:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmtvavp63q2h...

CVE-2026-44317 free5GC: PCF npcf-policyauthorization POST /app-sessions panics on suppFeat=1 with missing AfRoutReq via nil pointer dereference

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's PCF POST /npcf-policyauthorization/v1/app-sessions handler panics on a single authenticated request whose ascReqData.suppFeat == "1" enabling traffic-routing feature negotiation and whose medComponents...