CVE-2021-1732

CVE-2021-1732 CVE-­2021­-1732 Microsoft Windows 10 local privilege escalation vulnerability research and PoC/Exploit development Affected systems and application versions Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64­based Systems Windows 10 Version 20H2...

Malicious code in op-ts-server-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10907c74bd3094d2b21cc247498cb53b280d3e6bdb6947b86f17bee73b8eec7f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16034 Malicious code in op-ts-server-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10907c74bd3094d2b21cc247498cb53b280d3e6bdb6947b86f17bee73b8eec7f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

EUVD-2026-54789

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to pa...

CVE-2026-19288 astralisone rive-mcp-server-core importRiveFile Flow importRiveFile.ts path traversal

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to pa...

CVE-2026-19288

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to pa...

CVE-2026-19288 astralisone rive-mcp-server-core importRiveFile Flow importRiveFile.ts path traversal

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to pa...

CVE-2026-19288: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to pa...

PT-2026-69200

Name of the Vulnerable Software and Affected Versions astralisone rive-mcp-server-core versions up to db1d0cc4cd52589116360428b7504fd0ca748b3e Description A path traversal issue exists in the importRiveFile Flow component within the file packages/mcp-server/src/tools/importRiveFile.ts. A local...

CVE-2026-60208

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-16209: Missing Authentication for Critical Function

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

Improper Authorization

Overview @voltagent/server-core is a Framework-agnostic server core for VoltAgent Affected versions of this package are vulnerable to Improper Authorization via the handleGetMemoryConversation function. An attacker can gain unauthorized access to memory conversation data by manipulating the...

@bishk029/agent-smith (>=0.1.0, <=2.0.1), @voltagent/server-elysia (>=2.0.0, <=3.0.0-next.0) +3 more potentially affected by CVE-2026-13511 via @voltagent/server-core (>=1.0.0-next.1, <=3.0.0-next.0)

@voltagent/server-core NPM version =1.0.0-next.1, =0.1.0, =2.0.0, =1.0.0-next.1, =1.0.1, =0.1.0, =0.1.1 Source cves: CVE-2026-13511 Source advisory: SNYK:JS-VOLTAGENTSERVERCORE-17875090...

Microsoft Windows Shell 信息泄露漏洞

Microsoft Windows Shell is the graphical user interface of the Windows operating system developed by Microsoft Corporation. Key elements of the Windows Shell include the desktop, taskbar, start menu, task switcher, and autoplay features. There is an information leakage vulnerability present in...

Microsoft Windows Kerberos 数字错误漏洞

Microsoft Windows Kerberos is a software developed by Microsoft for authentication in network clusters. As a network authentication protocol, Kerberos aims to provide robust authentication services for client/server applications through a key system. There is an input validation vulnerability in...

Microsoft Active Directory Domain Services 缓冲区错误漏洞

Microsoft Active Directory Domain Services is a key service provided by Microsoft Corporation in the United States. It is used to manage and organize resources, users, computers, and other security objects within a network. There are security vulnerabilities associated with Microsoft Active...

Microsoft Windows Performance Monitor 数字错误漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. The Microsoft Windows Performance Monitor has a numerical error vulnerability. Attackers can exploit this vulnerability to execute code. The following products and versions are affected: Windows 1...

Microsoft Windows Deployment Services 资源管理错误漏洞

Microsoft Windows Deployment Services are a container for Windows deployment services an updated and redesigned version of Remote Installation Services RIS provided by Microsoft Corporation. These services allow for the setup of new computers through network-based unattended installations...

Microsoft Remote Desktop Client 缓冲区错误漏洞

Microsoft Remote Desktop Client is a remote desktop client developed by Microsoft Corporation. There are security vulnerabilities in Microsoft Remote Desktop Client. Attackers can exploit these vulnerabilities to execute code. The following products and versions are affected: Windows 10 Version...

Microsoft Windows SDK 数字错误漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There is a vulnerability in input validation of Microsoft Windows. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windows 11...