wgcloud 安全漏洞

WGCloud is a lightweight distributed server monitoring and operation system developed by Tianshiyeben as an individual developer. WGCloud versions 3.6.3 and earlier have security vulnerabilities. These vulnerabilities stem from the test connection feature in backend database management, which...

CVE-2026-30403

There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, which can be used to read any file on the victim's server...

CVE-2026-30404

The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery SSRF vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and perform other dangerous operations...

PT-2026-26306

The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery SSRF vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and perform other dangerous operations...

PT-2026-26305

CVE-2026-30403 There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, which can be used to read a… https://t.co/WiMRkDP1zD...

CVE-2026-30404

The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery SSRF vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and perform other dangerous operations...

CVE-2026-30403

There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, which can be used to read any file on the victim's server...

au.csiro.pathling:encoders (>=5.1.0 <=9.5.0), au.csiro.pathling:fhir-server (>=5.3.1 <=7.2.0) +321 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (>=0.0.1 <=6.8.2)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version =0.0.1, =5.1.0, =5.3.1, =6.2.1, =5.3.1, =5.3.1, =5.3.0, =0.0.9, =5.6.5, =4.0.0, =5.6.5, =4.1.0, =4.0.3, =4.1.0, =4.0.0, =5.2.1 and more Source cves: CVE-2026-33180 Source advisory: OSV:GHSA-P7M9-V2CM-2H7M...

au.csiro.pathling:encoders (>=5.1.0 <=9.5.0), au.csiro.pathling:fhir-server (>=5.3.1 <=7.2.0) +352 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (>=0.0.1 <=6.8.2)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version =0.0.1, =5.1.0, =5.3.1, =6.2.1, =5.3.1, =5.3.1, =5.3.0, =0.0.9, =5.6.5, =5.6.5, =5.6.5, =3.4.0, =5.6.5, =4.1.0, =4.0.3, =8.8.1 and more Source cves: CVE-2026-33180 Source advisory: OSV:GHSA-P7M9-V2CM-2H7M...

com.braimanm:uitaf (>=3.0.0 <=3.2.3), com.braimanm:uitaf-playwright (>=1.0.0-alpha <=1.0.1-alpha) +7 more potentially affected by CVE-2026-33166 via io.qameta.allure:allure-generator (>=2.10.0 <=2.37.0)

io.qameta.allure:allure-generator MAVEN version =2.10.0, =3.0.0, =1.0.0-alpha, =1.1.0, =0.1.17, =0.1.17, =1.0-RC1, =2.10.0, =2.37.0 - org.uitaf:uitaf-playwright =1.0.1 Source cves: CVE-2026-33166 Source advisory: OSV:GHSA-64HM-GFWQ-JPPW...

EUVD-2025-208844

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Enable exception fixup for specific ADE subcode This patch allows the LoongArch BPF JIT to handle recoverable memory access errors generated by BPFPROBEMEM instructions. When a BPF program performs memory access...

@abysslabs/cli (=0.0.2), @nuxt/test-utils (=4.0.0) +20 more potentially affected by unknown CVE via h3 (>=2.0.0 <=2.0.1-rc.14)

h3 NPM version =2.0.0, =3.23.1-20260131-121433-34f631e, =1.154.7, =1.154.7, =1.154.7, =1.154.7, =1.154.7, =1.154.7, =1.154.7, =1.154.7, =0.1.7, =0.3.1-beta.5, =0.0.1-beta.1, =1.0.1, =1.0.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WR4H-V87W-P3R7...

MAL-2026-1867 Malicious code in thread_ppe-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a9d2420c318197cca9d0d4523f1049462bd1abfbe0288f9679074611434235 The package threadppe-test was found to contain malicious code...

Malicious code in test-bugbounty-package-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f7339bb0bc55d33f83cf6bc6b2aed69072dc0de2c1fb416de6d8b67816e858 The package test-bugbounty-package-9 was found to contain malicious code...

MAL-2026-1863 Malicious code in test-bugbounty-package-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f7339bb0bc55d33f83cf6bc6b2aed69072dc0de2c1fb416de6d8b67816e858 The package test-bugbounty-package-9 was found to contain malicious code...

MAL-2026-1862 Malicious code in test-bugbounty-package-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ee2c6095d9dfd6bdd4945e804a736035b9e29d4265e6a0e455aff026911be7 The package test-bugbounty-package-6 was found to contain malicious code...

MAL-2026-1798 Malicious code in nf-cl-logger-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3215a4f0e3f4b33553d866c95c85ddbd61038f8cc37123818021c3307801abf0 The package nf-cl-logger-test was found to contain malicious code...

Malicious code in nf-cl-logger-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3215a4f0e3f4b33553d866c95c85ddbd61038f8cc37123818021c3307801abf0 The package nf-cl-logger-test was found to contain malicious code...

Malicious code in env-workflow-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c69ec15e609dd6c0e6dacd007a2467cc5e24a118f60cca22ec48c3b8225c4df The package env-workflow-test was found to contain malicious code...

MAL-2026-1725 Malicious code in env-workflow-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c69ec15e609dd6c0e6dacd007a2467cc5e24a118f60cca22ec48c3b8225c4df The package env-workflow-test was found to contain malicious code...