The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).
CVE-2026-39836
The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).
2026-05-08 归档
今日共收录 1100 条安全情报，包含 294 个 CVE，452 篇安全通告，以及 61 篇研究论文。
← 返回归档列表A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects...
CVE-2026-8097
A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the fi
CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta>...
CVE-2026-39823
CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. If the URL
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the...
CVE-2026-44742
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as e
The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known...
CVE-2026-39817
The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sa
A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects...
CVE-2026-8083
A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the
A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the...
CVE-2026-8084
A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the f
ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When...
CVE-2026-39825
ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite functi
A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function...
CVE-2026-8086
A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file f
The "go bug" command writes to two files with predictable names in the system temporary directory...
CVE-2026-39819
The "go bug" command writes to two files with predictable names in the system temporary directory (for example, "/tmp").
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double...
CVE-2026-33811
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a
If a trusted template author were to write a <script> tag containing an empty 'type' attribute or...
CVE-2026-39826
If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASC
Note Mark: Arbitrary File Write via Path Traversal in Asset Names Leads to Remote Code Execution
CVE-2026-44522
### Description The Note Mark application allows authenticated users to upload assets to notes via `POST /api/notes/{no
Zebra Vulnerable to Allocation Amplification in Inbound Network Deserializers
CVE-2026-44500
# CVE-2026-44500: Allocation Amplification in Inbound Network Deserializers ## Summary Several inbound deserialization
Zebra's Block Validator Undercounts Coinbase and P2SH Sigops
CVE-2026-44498
Zebra's block validator undercounts transparent signature operations against the 20000-sigop block limit (`MAX_BLOCK_SIG
FacturaScripts Vulnerable to Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download
CVE-2026-27892
## Summary **Fectura Scripts** is an open-source ERP application, a **sensitive information disclosure vulnerability**
FacturaScripts Vulnerable to Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism
CVE-2026-27891
### Summary A Critical vulnerability exists in the `Plugins::add()` function. The system fails to properly validate the
A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in...
CVE-2026-36387
A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /add_members.php. This
A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote,...
CVE-2026-7413
A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated (or weakly authen
Cross-Site Scripting (XSS) vulnerability exists in Webkul Krayin CRM v2.1.5. The application...
CVE-2026-36341
Cross-Site Scripting (XSS) vulnerability exists in Webkul Krayin CRM v2.1.5. The application fails to sanitize user-supp