Logo
Retour à la veille

CVE-2026-51937

Publié : 7 juillet 2026
Modifié : 7 juillet 2026
Lien officiel NVD

Description détaillée

An issue in Oneblog V2.3.9 allows a remote attacker to obtain sensitive information via the RestApiController.java, JsApiTicketComponent.java, and the GetAccessTokenComponent.java component

Références et Patchs

https://developers.weixin.qq.com/doc/offiaccount/Basic_Information/Get_access_token.htmlhttps://gist.github.com/Passwords404/2599df955cdb36b36b9551b5b7809114https://github.com/zhangyd-c/OneBlog/issues/43

Dernières Vulnérabilités

CVE-2026-60002

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

VOIR DÉTAILS

CVE-2026-60001

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

VOIR DÉTAILS

CVE-2026-60000

sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.

VOIR DÉTAILS