A security flaw has been discovered in TimBroddin astro-mcp-server up to 1.1.1. The impacted...
CVE-2026-7591
A security flaw has been discovered in TimBroddin astro-mcp-server up to 1.1.1. The impacted element is an unknown funct
2026-05-03 归档
今日共收录 715 条安全情报，包含 73 个 CVE，373 篇安全通告，以及 10 篇研究论文。
← 返回归档列表A flaw has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this...
CVE-2026-7595
A flaw has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this vulnerability is the functio
flipperzero-firmware commit ad2a80 was discovered to contain a stack overflow in the "Main"...
CVE-2026-30363
flipperzero-firmware commit ad2a80 was discovered to contain a stack overflow in the "Main" function.
collin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08)...
CVE-2026-37537
collin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08) contains an integer underflow
An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd...
CVE-2026-37457
An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of F
A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65...
CVE-2026-26461
A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticate
An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an...
CVE-2026-35233
An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link f
A vulnerability was found in ggerve coding-standards-mcp. This issue affects the function...
CVE-2026-7588
A vulnerability was found in ggerve coding-standards-mcp. This issue affects the function get_style_guide/get_best_pract
An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of...
CVE-2025-63547
An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted pa
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
京公网安备 11000002002063号
输入内容为公安备案号，并非有效威胁情报文章，无法生成摘要。请提供真实的威胁情报内容。
（总）网出证（京）字第281号
输入内容仅为一条标题为“（总）网出证（京）字第281号”的记录，来源为360CERT安全报告，但实际链接指向360.cn的版权许可证页面，且摘要字段为空。tags包含apt、360、malware、report，表明可能涉及APT分析或恶意
京网文〔2020〕6051-1195号
本次输入的内容并非威胁情报文章，而是一条中国互联网出版许可证号（京网文〔2020〕6051-1195号），来源为360CERT安全报告页面，但实际链接指向360.cn的licence页面。摘要和正文缺失，仅包含标签如apt、360、malw
京ICP证080047号[京ICP备08010314号-6]
输入信息不完整，仅包含网站备案编号及来源（360CERT 安全报告），无实际威胁情报内容。未提供任何摘要、漏洞、IOC或攻击细节，无法进行分析。
A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. Impacted is the function start_lan of the file /apply.cgi. The manipulation of the argume...
CVE-2026-7675
该漏洞影响深圳力博拓科技（Shenzhen Libituo Technology）生产的LBT-T300-HW1路由器，版本最高至1.2.8。漏洞位于/apply.cgi文件的start_lan函数中，通过操纵Channel/ApCliSs
A vulnerability was detected in crmeb_java up to 1.3.4. This vulnerability affects unknown code of the file crmeb/crmeb-service/src/main/java/com/zbkj/service/service/impl/Uploa...
CVE-2026-7673
CVE-2026-7673 影响 CRMEB Java 版本至 1.3.4，涉及 Admin Upload 组件中的 UploadServiceImpl.java 文件。攻击者在已登录且具备管理员权限（CVSS 权限要求为高）的情况下，可通
Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: c...
CVE-2026-40561
该漏洞影响 Perl 的 Starlet 服务器（版本 0.31 及之前）。漏洞源于 Starlet 在处理包含 Content-Length 和 Transfer-Encoding: chunked 两个头部的 HTTP 请求时，错误地将
A security vulnerability has been detected in youlaitech youlai-boot up to 2.21.1. This affects the function getUserList of the file src/main/java/com/youlai/boot/system/control...
CVE-2026-7672
CVE-2026-7672 是一个影响 youlaitech youlai-boot 至 2.21.1 版本的安全漏洞。该漏洞位于用户管理端点（UserController.java 中的 getUserList 函数），由于对参数 'or
A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android. The impacted element is an unknown function of the file /TwoFactor. Such manipulation l...
CVE-2026-7671
该漏洞影响 CodeWise 公司开发的 Tornet 电动滑板车移动应用（iOS/Android 版本 4.75）。漏洞位于 /TwoFactor 文件中的某个未知函数，存在“对过多认证尝试的限制不当”问题，即缺乏有效的暴力破解防护机制。
A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSummarize/UserSel.aspx. This manipulation of the argument Dept...
CVE-2026-7670
该漏洞存在于 Jinher OA 1.0 版本中，具体位于文件 /C6/JHSoft.Web.PlanSummarize/UserSel.aspx 的未知函数。攻击者可以通过构造恶意的 DeptIDList 参数，向数据库注入任意 SQL