Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
2026-06-07 归档
今日共收录 735 条安全情报，包含 30 个 CVE，368 篇安全通告，以及 77 篇研究论文。
← 返回归档列表Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known
CVE-2026-47716
### Description Bugsink’s issue list supports bulk actions such as resolving or muting selected issues. In affected vers
Bugsink: Issue event views can show an event from another project if its UUID is known
CVE-2026-47715
### Description Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look
Shopper: Missing per-action authorization on PaymentMethods, Currencies and Carriers admin tables
CVE-2026-47745
## Impact The admin tables for `PaymentMethods`, `Currencies` and `Carriers` exposed inline toggles and per-record acti
TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs
CVE-2026-47760
### Impact TinyMCE 6.8.x contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer.
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
DeepGo: Predictive Directed Greybox Fuzzing.
定向灰盒模糊测试（DGF）旨在通过预定义目标位置强化对易受攻击代码区域的测试。现有DGF技术主要基于启发式算法优化适应度指标，但这些方法依赖历史执行信息，对尚未执行的路径缺乏预见性，导致难以处理具有复杂约束的路径，从而降低DGF效率。本文提
Holistic Concolic Execution for Dynamic Web Applications via Symbolic Interpreter Analysis.
本文提出了一种名为符号解释器分析（SIA）的新方法，用于解决动态Web应用程序在符号执行中面临的多语言挑战。传统的符号执行工具由于对动态语言（如PHP）的语法支持有限且工程成本高，难以有效分析现代Web应用。SIA的核心思想是：由于Web应
A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The...
CVE-2026-11413
A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the func
A security flaw has been discovered in iAI Lab PDF AI App 4.21.0 on Android. Impacted is the...
CVE-2026-11411
A security flaw has been discovered in iAI Lab PDF AI App 4.21.0 on Android. Impacted is the function getExternalCacheDi
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta...
CVE-2025-1740
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypas
Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows...
CVE-2025-0640
Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure. Thi
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to...
CVE-2026-9829
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based SQL Injectio
The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-7624
The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inc
The Click to Chat – WA Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting...
CVE-2026-7795
The Click to Chat – WA Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [chat] shortcode
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud...
CVE-2025-2414
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypa
The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator...
CVE-2026-8976
The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is
The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More...
CVE-2026-10038
The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vul
A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium...
CVE-2026-11431
A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and A