Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential...
CVE-2026-9139
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web
2026-05-21 归档
今日共收录 1079 条安全情报，包含 251 个 CVE，425 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass...
CVE-2026-9141
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass vulnerability in the embedded web
Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud worm
CVE-2026-46412
## Summary Between 2026-05-11 20:19 UTC and 22:56 UTC, an attacker used a compromised npm publish token to publish 18 m
Hackers bypass SonicWall VPN MFA due to incomplete patching
2026年5月，安全媒体报道称，攻击者利用SonicWall Gen6 SSL-VPN设备的不完整补丁绕过多因素认证（MFA），成功暴力破解VPN凭证后部署勒索软件工具。该漏洞源于SonicWall对先前安全更新的不完全修补，导致MFA保护
Ivanti Endpoint Manager Mobile代码注入漏洞
该漏洞影响Ivanti Endpoint Manager Mobile产品，这是一个用于企业移动设备管理（MDM）的解决方案。根据知道创宇/Seebug的通报，该产品存在代码注入漏洞，攻击者可能通过精心构造的输入在服务器端注入并执行任意代码
Huawei Secoway USG firewall weak password
Huawei Secoway USG firewall weak password
Yokogawa YFGW410 gateway
Yokogawa YFGW410 gateway
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a stored cross-site scripting...
CVE-2026-9144
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a stored cross-site scripting vulnerability in the embedde
A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco...
CVE-2026-20171
A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switc
Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: *
CVE-2026-46431
### Summary The SSE event server's `Access-Control-Allow-Origin` response header was hardcoded to the wildcard `*` rega
Caddy Defender trusted proxy client IP bypass
CVE-2026-46415
### Impact Caddy Defender used `r.RemoteAddr` when evaluating whether a request should be blocked. `RemoteAddr` is the
CISA Adds Seven Known Exploited Vulnerabilities to Catalog
CVE-2026-45498 · CVE-2009-3459 · CVE-2010-0249 · CVE-2008-4250 · CVE-2026-41091 · CVE-2010-0806 · CVE-2009-1537
CISA于2026年5月20日将7个已知被利用的漏洞（KEV）添加到其已知被利用漏洞目录中。这些漏洞包括：CVE-2008-4250（Microsoft Windows缓冲区溢出漏洞）、CVE-2009-1537（Microsoft Dir
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass vulnerability in the embedded web configuration interface that allows unauthenticated atta...
CVE-2026-9141
CVE-2026-9141 影响 Taiko AG1000-01A SMS Alert Gateway 的 Rev 7.3 和 Rev 8 版本。该设备是一款用于短信报警的网关设备，其嵌入式 Web 配置接口存在严重的认证绕过漏洞。由于缺乏
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web configuration interface where authentication is implement...
CVE-2026-9139
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 和 Rev 8 的嵌入式 Web 配置界面存在硬编码凭据漏洞。身份验证完全由客户端 JavaScript 在 login.zhtml 中实现，静态明文凭据
Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft
CVE-2026-46354
## Summary `azureidentity.Validate()` verifies that the PKCS#7 signer certificate chains to a trusted Azure CA but neve
Pool-Party: Exploiting Browser Resource Pools for Web Tracking.
该论文发现了一类在浏览器中未被现有防御机制缓解的隐蔽通道，称为“pool-party”攻击。这类攻击通过操纵有限但未隔离的资源池（如连接池、缓存等）来创建跨站点的隐蔽通道。研究者证明，这类攻击比先前认知的更普遍、更实用，且可利用方式更多。这
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
phpMyFAQ: Missing Password Reset Token Allows Account Takeover via Username/Email Enumeration
### Summary An authentication bypass vulnerability in phpMyFAQ allows any unauthenticated attacker to reset the password
Speed Kills: Exploring Confused Deputy Attacks Through Edge AI Accelerators
本文首次系统性地研究了边缘AI加速器（AIA）中的混淆代理攻击（Confused Deputy Attacks, CDA）。AIA是专用硬件（如TPU），用于高效执行AI应用和端侧推理。随着AI需求增长，AIA被广泛部署在边缘/嵌入式设备上
CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled (Severity: HIGH)
CVE-2026-0265
CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled (Severity: HIGH)