IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 do not properly validate uploaded fil...

CVE-2026-42538

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versi

历史摘要 · 未重新核验 · NVD

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 contain a weakness where an attacker ...

CVE-2026-42329

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Versi

历史摘要 · 未重新核验 · NVD

A flaw has been found in Shibby Tomato 1.28.0000. This affects the function start_dhcpc of the file /sbin/rc of the component Web UI. This manipulation causes os command injecti...

CVE-2026-10870

A flaw has been found in Shibby Tomato 1.28.0000. This affects the function start_dhcpc of the file /sbin/rc of the comp

历史摘要 · 未重新核验 · NVD

An integer underflow in bt_mesh_sol_recv() in the Bluetooth Mesh solicitation handling (subsys/bluetooth/mesh/solicitation.c) leads to an out-of-bounds write. When CONFIG_BT_MES...

CVE-2026-5589

An integer underflow in bt_mesh_sol_recv() in the Bluetooth Mesh solicitation handling (subsys/bluetooth/mesh/solicitati

历史摘要 · 未重新核验 · NVD

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to version 2.4.28, DFIR-IRIS exposes an optional GraphQL...

CVE-2026-41522

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior

历史摘要 · 未重新核验 · NVD

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In versions 4.9.0 through 5.0.0, an authenticated ...

CVE-2026-41518

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c

历史摘要 · 未重新核验 · NVD

CoreShop is a Pimcore enhanced eCommerce solution. In versions 5.0.1 through 5.1.0-beta.1,, the GitHub Actions workflow (`.github/workflows/static.yml`) uses the `pull_request_t...

CVE-2026-41249

CoreShop is a Pimcore enhanced eCommerce solution. In versions 5.0.1 through 5.1.0-beta.1,, the GitHub Actions workflow

历史摘要 · 未重新核验 · NVD

NAVTOR NavBox through version 4.16.1.20 contains hard-coded credentials within its Windows Communication Foundation (SOAP) implementation. If the SOAP functionality is enabled, ...

CVE-2026-21404

NAVTOR NavBox through version 4.16.1.20 contains hard-coded credentials within its Windows Communication Foundation (SOA

历史摘要 · 未重新核验 · NVD

Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses `\s+` which matches newlines (allowing embedded newlines to pass),...

CVE-2026-41237

Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses `\s+` whi

历史摘要 · 未重新核验 · NVD

Froxlor is open source server administration software. Version 2.3.6 contains a symlink-following flaw in the root-owned SSH key synchronization path used for customer FTP users...

CVE-2026-41236

Froxlor is open source server administration software. Version 2.3.6 contains a symlink-following flaw in the root-owned

历史摘要 · 未重新核验 · NVD

Froxlor is open source server administration software. Version 2.3.6 lets administrators configure `system.available_shells` as the approved shell list that customers may assign...

CVE-2026-41235

Froxlor is open source server administration software. Version 2.3.6 lets administrators configure `system.available_she

历史摘要 · 未重新核验 · NVD

Froxlor is open source server administration software. Prior to version 2.3.7, the `DomainZones.add` API endpoint does not sanitize newline characters in TXT record content. An ...

CVE-2026-41234

Froxlor is open source server administration software. Prior to version 2.3.7, the `DomainZones.add` API endpoint does n

历史摘要 · 未重新核验 · NVD

quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.59.1, an attacker can cause excessive memory allocation in quic-go's HTTP/3 client and server impleme...

CVE-2026-40898

quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.59.1, an attacker can cause excessive memory

历史摘要 · 未重新核验 · NVD

A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or r...

CVE-2026-36499

A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB wr

历史摘要 · 未重新核验 · NVD

Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.0.0.559 due to improper sanitization of user input in tex...

CVE-2025-65640

Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.

历史摘要 · 未重新核验 · NVD

The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.21.Final, HKDF_expand returns non-NULL on failure. The byte[] is filled with zeros an...

CVE-2026-41207

The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.21.Final, HKDF_expand return

历史摘要 · 未重新核验 · NVD

决赛直播｜第四届阿里CTF安全挑战赛

本文是阿里云先知社区发布的关于第四届阿里CTF安全挑战赛决赛的直播通知。文章主要介绍了比赛的时间、平台以及观看方式，旨在邀请安全爱好者参与或观看决赛直播。内容不涉及任何漏洞、攻击活动、威胁情报或安全事件，纯属安全技术竞赛的宣传报道。对于威胁

历史摘要 · 未重新核验 · 先知社区

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

本文为阿里云2027届实习生招聘公告，发布于先知社区。内容主要介绍阿里云安全团队面向2027届毕业生的实习生招聘计划，强调加入顶尖安全团队的机会，并邀请有志于AI时代安全领域的学生投递简历。文章未涉及任何网络安全威胁、漏洞、攻击活动或防御技

历史摘要 · 未重新核验 · 先知社区

Control CenterAccess the Akamai platform

Control CenterAccess the Akamai platform

历史摘要 · 未重新核验 · Akamai Security Research

Akamai Security

Akamai Security

历史摘要 · 未重新核验 · Akamai Security Research