CVE-2023-2594

CVE-2023-2594 https://vulners.com/cve/CVE-2023-2594 在SourceCodester Food Ordering Management System 1.0中发现了一个被归类为严重的漏洞。受影响的是组件Registration的未知功能。对参数username的操作导致了SQL注入。攻击可以远程发起。该漏洞的标识符为VDB-228396。...

Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to 1 CFIDE/administrator/settings/mappings.cfm, 2 logging/settings.cfm, 3 datasources/index.cfm, 4...

Weaver OA 9.5 - Information Disclosure

A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2config.ini. The manipulation leads to files or directories accessible. The attack may be initiated remotely. id:...

CVE-2023-33768

CVE-2023-33768 描述 在 Belkin Wemo Smart Plug WSP080 v1.2 的设备固件更新过程中，固件的签名验证不正确，导致攻击者可以通过特制的固件文件引发拒绝服务 DoS 攻击。 附加信息 在通过移动应用程序更新 Wemo 智能插座的固件时，我们发现如果智能插座固件二进制文件的固件签名无效，会导致 Wemo 智能插座停止响应（变砖）。 我们利用 Wemo Android 应用程序 com.belkin.wemoandroid 向 Wemo 智能插座注入修改后的固件。 原始固件位于：...

CVE-2026-8054

1. 漏洞概述 CVE-2026-8054 是一个存在于 dotCMS Core 发布审计 API（Publish Audit API）中的高危前台无需认证 SQL 注入漏洞 （Pre-auth SQL Injection）。该漏洞由官方追踪为安全事件 SI-75 ，并于 2026 年 5 月底被正式收录披露。由于攻击者无需任何账号权限即可远程触发，其潜在危害非常严重。 属性| 值 ---|--- CVE编号| CVE-2026-8054 官方追踪| SI-75 漏洞类型| SQL注入 CWE-89 影响组件| dotCMS Core - Publish Audit API CVSS评分...

CVE-2026-82042 UTMStack < 11.2.16 Authentication Bypass via InternalApiKeyFilter

UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full administrative API access by presenting a valid Utm-Internal-Key header matching the INTERNALKEY environment variable value, which the InternalApiKeyFilter accepts for any endpoint...

CVE-2026-103918 @orpc/zod: Prototype injection in smart coercion

oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.10, the @orpc/zod ZodSmartCoercionPlugin and experimentalZodSmartCoercionPlugin collect object and record properties in plain objects and resolve shape keys through the prototype chai...

CVE-2020-10129

CVE-2020-10129 - SearchBlox 产品在 V-9.2 之前版本存在权限提升漏洞 - 低权限用户能够访问管理员功能 产品描述： SearchBlox 简化了复杂组织的企业搜索。SearchBlox 直观智能的工具提供开箱即用的设置、安全加密和低总拥有成本。AI 驱动的解决方案优化了搜索旅程的每一步，显著提升参与度。SearchBlox 是金融服务、医疗保健和政府领域领导者的轻松选择。 描述： 9.2.1 版本之前的 SearchBlox 存在权限提升漏洞 - 低权限用户能够访问管理员功能 漏洞类型： 权限提升 - 低权限用户能够访问管理员功能 严重性等级： 高...

CVE-2026-103036

The oRPC tool (specifically the @orpc/json-schema SmartCoercionPlugin ) is vulnerable to a prototype injection issue in versions prior to 1.14.9 . The root cause is the use of JsonSchemaCoercer to resolve schema.properties entries through the prototype chain. A remote client can supply __proto__ ...

CVE-2026-66081

A flaw was found in Apache Thrift's C GLib bindings. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input that triggers the access of an uninitialized pointer. This access can cause the application to crash, resulting in a Denial of Service DoS...

CVE-2020-37278

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

CVE-2026-103957 Server-side request forgery in the OAuth2 discovery handling in Loom for AWS

Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the deployment and to cause the application to issue requests to arbitrary internal network locations, via a crafted...

CVE-2026-103957 Server-side request forgery in the OAuth2 discovery handling in Loom for AWS

Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the deployment and to cause the application to issue requests to arbitrary internal network locations, via a crafted...

CVE-2026-104861

A flaw was found in probe-image-size. An unauthenticated remote attacker can exploit this vulnerability to cause a Denial of Service DoS by supplying specially crafted Scalable Vector Graphics SVG input. Due to inefficient pattern matching and input handling during SVG parsing, processing unclose...

EUVD-2020-31274

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

CVE-2026-15598

CVE-2026-15598 已在 antv layout 2.0.0 中发现一个弱点。 这会影响库 lib/util/object.js 中的 setNestedValue 函数。对参数 path 进行操作可能导致对象原型属性被不当控制的修改。该攻击可以远程发起。项目方已通过 issue 报告提前得知该问题，但尚未回应。...

DEBIAN-CVE-2026-103627

Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-103629

Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-103626

Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-104637

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...