free5gc v4.1.0 中 CreateUEContext 处理程序组件存在一个问题,允许攻击者通过发送一个经过精心构造的请求导致拒绝服务(DoS)。
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
| # | POC Description | Source Link | Shenlong Link |
|---|
No public POC found.
Login to generate AI POC| CVE-2026-37006 | gpt-researcher v0.14.7之前WebSocket端点RCE漏洞 | |
| CVE-2026-37070 | Veno 4.4.9 文件管理器访问控制不当 | |
| CVE-2026-37064 | Veno File Manager 4.4.9 未认证用户枚举漏洞 | |
| CVE-2026-37198 | Open5GS v2.7.6 SMF组件整数溢出致服务拒绝 | |
| CVE-2026-37068 | VFM 4.4.9 认证用户任意文件写入 | |
| CVE-2026-37072 | Veno文件管理器4.4.9访问控制不当 | |
| CVE-2026-37069 | Veno File Manager 4.4.9 绝对路径泄露漏洞 | |
| CVE-2026-30612 | Time4Popcorn 多平台更新器远程代码执行漏洞 | |
| CVE-2026-37007 | crewai-tools 1.10.2rc1 路径遍历致代码执行 | |
| CVE-2026-37009 | crewai-tools 1.10.2rc1 SQL注入漏洞 | |
| CVE-2026-37073 | Veno File Manager 4.4.9访问控制缺陷致邮件发送 | |
| CVE-2026-37066 | Veno File Manager 4.4.9 路径遍历致任意文件读取漏洞 | |
| CVE-2026-37071 | Veno File Manager 4.4.9 任意文件重命名致权限提升 | |
| CVE-2026-37065 | Veno File Manager 4.4.9 任意文件删除 | |
| CVE-2026-37012 | PentestGPT 1.0.0 Langfuse 硬编码密钥致数据泄露 | |
| CVE-2026-35868 | LB-link AC2100_AZ3 V1.0.4 命令注入漏洞 | |
| CVE-2026-35869 | LB-link AC450M V4.0.0 命令注入漏洞 | |
| CVE-2026-36102 | Checkmate 3.3.0 邀请接口越权提权 | |
| CVE-2026-30070 | free5gc v4.0.1 HandleGetSharedData拒绝服务漏洞 | |
| CVE-2026-30069 | free5gc v4.0.1 UDMC空指针解引用致DoS |
Showing top 20 of 49 CVEs. View all on vendor page → →
No comments yet