Cisco ASA / PIX - Privilege Escalation (EPICBANANA)
Cisco ASA / PIX - Privilege Escalation (EPICBANANA)
2026-05-09 归档
今日共收录 1190 条安全情报，包含 490 个 CVE，393 篇安全通告，以及 21 篇研究论文。
← 返回归档列表【智能体开发平台】关于 DeepSeek V4 Flash 模型即将正式商业化的公告
【智能体开发平台】关于 DeepSeek V4 Flash 模型即将正式商业化的公告
【安全通告】Linux Kernel "Dirty Frag" 本地权限提升漏洞风险通告
【安全通告】Linux Kernel "Dirty Frag" 本地权限提升漏洞风险通告
Chrome Dev for Desktop Update
The Dev channel has been updated to 150.0.7828.2 for Windows, Mac and Linux.A partial list of changes is available in th
MFSA 2026-42Security Vulnerabilities fixed in Firefox ESR 115.35.2
MFSA 2026-42Security Vulnerabilities fixed in Firefox ESR 115.35.2
MFSA 2026-41Security Vulnerabilities fixed in Firefox ESR 140.10.2
MFSA 2026-41Security Vulnerabilities fixed in Firefox ESR 140.10.2
MFSA 2026-40Security Vulnerabilities fixed in Firefox 150.0.2
MFSA 2026-40Security Vulnerabilities fixed in Firefox 150.0.2
Linux 内核提权 Dirty Frag(Dirty Frag)
Linux 内核提权 Dirty Frag(Dirty Frag)
MFSA 2026-44Security Vulnerabilities fixed in Thunderbird 140.10.2
MFSA 2026-44Security Vulnerabilities fixed in Thunderbird 140.10.2
MFSA 2026-43Security Vulnerabilities fixed in Thunderbird 150.0.2
MFSA 2026-43Security Vulnerabilities fixed in Thunderbird 150.0.2
Sentry is an error tracking and performance monitoring tool. From version 21.12.0 to before version 26.4.1, a critical vulnerability was discovered in the SAML SSO implementatio...
CVE-2026-42354
Sentry is an error tracking and performance monitoring tool. From version 21.12.0 to before version 26.4.1, a critical v
FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to unauthenticated Remote Code Exe...
CVE-2026-42302
FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of
Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Publish PR Docker Image workflow (.github/workflows/pr-dock...
CVE-2026-42298
Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Pu
Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, the /webhooks/sns endpoint accepts Amazon SNS notification payloads from unauthenticated ...
CVE-2026-42193
Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, the /webhooks/sns endpoint accep
Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --address CLI fl...
CVE-2026-42072
Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and wri
Directory Traversal vulnerability in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the dash_uploader/httprequesthandler...
CVE-2026-38360
Directory Traversal vulnerability in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execut
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0 and prior to zebra-script version 6.0.0, the fix for CVE-2026-41583 introduced a separate issue due...
CVE-2026-44497
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0 and prior to zebra-script version 6.0.0, t
RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth.py — check_sign_in_key(). This issue has been patched vi...
CVE-2026-41588
RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to zebra-script version 5.0.2, after a refactoring, Zebra failed to validate a consensus ...
CVE-2026-41583
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to zebra-script version 5.0.2, a
Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. This vulnerabi...
CVE-2026-37431
Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber paramete