An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder ...
CVE-2026-42951
An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device which includes accoun
2026-05-30 归档
今日共收录 1277 条安全情报，包含 517 个 CVE，386 篇安全通告，以及 105 篇研究论文。
← 返回归档列表Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits...
CVE-2026-44611
Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits password length and is su
The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with...
CVE-2026-42941
The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password c
Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.
CVE-2026-42929
Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.
The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can...
CVE-2026-40425
The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive file
ouroboros-ai Vulnerable to Remote Code Execution via Untrusted Project-Directory .env
CVE-2026-47211
### Impact A Remote Code Execution (RCE) vulnerability was discovered in Ouroboros. If a user clones a malicious reposit
Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection
CVE-2026-47122
## Summary AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data i
Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta
CVE-2026-47121
## Summary Binary delta apply intermediate-symlink traversal in malicious .delta `Autoupdate/SUBinaryDeltaApply.m` enf
russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets
CVE-2026-46702
### Summary When SSH compression is enabled, `russh` accepted compressed packets whose on-wire size passed the normal t
AgenticMail API/storage and outbound relay hardening fixes
CVE-2026-47255
The current upstream main branch at commit 7e0206d was reviewed, and the fix-first patch set was rebased on 2026-05-18.
Parse Server's GraphQL "Did you mean ...?" validation suggestions disclose schema to unauthenticated callers
CVE-2026-47248
### Impact Parse Server's GraphQL endpoint discloses schema metadata to unauthenticated callers through `Did you mean .
ezsystems/ezpublish-legacy has a SQL injection in dfscleanup
CVE-2026-38739
NB: All tags and branches in this repository are past their end of life, so the vulnerability will not be fixed. The adv
xiaomusic v0.5.7 contains an unauthenticated path traversal vulnerability in the GET /music/...
CVE-2026-10108
xiaomusic v0.5.7 contains an unauthenticated path traversal vulnerability in the GET /music/{file_path:path} endpoint th
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Cookie settings
Cookie settings
Mozilla Monitor
Mozilla Monitor
The Mozilla Manifesto
The Mozilla Manifesto
Mozilla Foundation
Mozilla Foundation
Accessibility Policy
Accessibility Policy
Create an Account
Create an Account