free5GC's NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri)
CVE-2026-44319
### Summary free5GC's NEF terminates the entire process when a stored PFD-subscription `notifyUri` cannot be reached. In
2026-05-10 归档
今日共收录 706 条安全情报，包含 57 个 CVE，372 篇安全通告，以及 20 篇研究论文。
← 返回归档列表Open WebUI Vulnerable to Arbitrary File Upload and Path Traversal
CVE-2026-44566
# **CONFIDENTIAL** # KL-CAN-2024-002 ## Vulnerability Details | # | Field | Value | |---|-------|-------| | 1 | **Dis
Open WebUI has Improper Authorization Control
CVE-2026-44567
# **CONFIDENTIAL** # Vulnerability Disclosure Analysis Documentation --- ## Vulnerability Details | # | Field | Valu
Open WebUI has stored XSS in Excel file preview
CVE-2026-44549
### Summary Excel file attachments are previewed in an unsafe way. A crafted XLSX file payload can be used to cause the
Snipe-IT has Privilege Escalation via API Permissions Assignment
CVE-2026-44832
### Impact An authenticated user with only `users.edit` permission can escalate their own privileges to `admin` by sendi
Snipe-IT has Stored XSS via Component Checkout Notes (v8.4.0)
CVE-2026-44831
### Impact Users with component view access could be impacted by an unescaped `notes` column. ### Patches This was pat
SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the...
CVE-2026-7807
SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary
Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin...
CVE-2026-29201
Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary f
Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows...
CVE-2026-29202
Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows arbitrary Perl code execution
A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowing...
CVE-2026-29203
A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowing setting root permissions on
OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured
CVE-2026-44213
### Summary The `OpenTelemetry.Exporter.Instana` NuGet package does not validate HTTPS/TLS certificates are valid when
Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size
CVE-2026-44247
### Impact The Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluster pod
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
京公网安备 11000002002063号
本条目为360CERT安全报告，但实际内容仅包含公安备案信息，未提供任何威胁情报细节。可能为数据错误或非情报内容。根据标签（apt, report, malware, 360）推测可能涉及APT攻击或恶意软件分析，但无法核实。建议忽略或重新
（总）网出证（京）字第281号
该输入为360公司ICP许可证公示页面（网出证（京）字第281号），并非威胁情报文章。页面内容不涉及任何攻击活动、漏洞、恶意软件或威胁行为者信息。标签中包含'apt'、'report'、'malware'、'360'，但实际内容与这些标签无
京网文〔2020〕6051-1195号
本文档标题为“京网文〔2020〕6051-1195号”，经查验为网络文化经营许可证编号，并非实际威胁情报报告。来源标注为“360CERT安全报告”，但提供的URL指向360.cn的许可证页面，无任何安全事件描述、技术细节或IOC。鉴于缺乏有
京ICP证080047号[京ICP备08010314号-6]
本次输入来源为360CERT安全报告，但提供的标题和URL指向工信部备案页面（beian.miit.gov.cn），未包含任何有效的威胁情报内容。因此无法提取攻击活动、技术细节或防御建议。可能为数据抓取错误或无效输入。
A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function pcf_sess_set_ipv6prefix of the file /src/pcf/context.c of the component PCF. Execut...
CVE-2026-8224
Open5GS 是一个开源 5G 核心网实现。在版本 2.7.7 及之前，其 PCF（策略控制功能）组件中存在一个拒绝服务漏洞。具体位置在 `/src/pcf/context.c` 文件的 `pcf_sess_set_ipv6prefix`
A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is the function pcf_sess_sbi_discover_and_send of the component sm-policies Endpoint. Performing...
CVE-2026-8223
Open5GS是一个开源5G核心网络实现。在2.7.7版本及之前，其sm-policies组件的pcf_sess_sbi_discover_and_send函数存在一个拒绝服务漏洞。攻击者无需身份验证即可远程利用此漏洞，通过发送特制请求触发
A vulnerability has been found in Open5GS up to 2.7.7. Affected is the function pcf_nbsf_management_handle_register of the file src/pcf/nbsf-handler.c of the component sm-polici...
CVE-2026-8222
CVE-2026-8222 影响 Open5GS 至 2.7.7 版本。漏洞位于 sm-policies 端点处理函数 pcf_nbsf_management_handle_register 中（文件 src/pcf/nbsf-handle