Unauthenticated Local File Inclusion in Kastell <= 2.0 versions.
CVE-2026-52707
Unauthenticated Local File Inclusion in Kastell <= 2.0 versions.
2026-06-18 归档
今日共收录 819 条安全情报，包含 0 个 CVE，417 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Dell PowerFlex Manager, version(s) Version prior to 4.8, contain(s) an Inclusion of Functionality...
CVE-2026-22283
Dell PowerFlex Manager, version(s) Version prior to 4.8, contain(s) an Inclusion of Functionality from Untrusted Control
A flaw was found in 389 Directory Server in the __aclp__normalize_acltxt() function of aclparse.c...
CVE-2026-12528
A flaw was found in 389 Directory Server in the __aclp__normalize_acltxt() function of aclparse.c. A malformed ACI (Acce
A stack-based buffer overflow exists in the raw_to_header() function in src/microtar.c in rxi...
CVE-2026-55738
A stack-based buffer overflow exists in the raw_to_header() function in src/microtar.c in rxi microtar 0.1.0. The functi
Unauthenticated Arbitrary File Deletion in WorkScout-Core <= 1.7.11 versions.
CVE-2026-52716
Unauthenticated Arbitrary File Deletion in WorkScout-Core <= 1.7.11 versions.
Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected
CVE-2026-55636
### Summary Capsule v0.13.2 webhook rules contain `namespace/finalize` (singular) instead of `namespaces/finalize` (plur
Multer vulnerable to Denial of Service via deeply nested field names
CVE-2026-5079
### Impact Multer is vulnerable to a Denial of Service (DoS) via deeply nested field names in multipart form data. The
Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads
CVE-2026-5038
### Impact A vulnerability in Multer allows an attacker to trigger a Denial of Service (DoS) by aborting or sending mal
Gitea: Stored XSS via glTF `extensionsRequired` in Gitea 3D File Viewer
CVE-2026-28737
## Summary Me again. Gitea's built-in 3D file viewer (powered by Online3DViewer) is vulnerable to stored cross-site sc
Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
CVE-2026-54316
Because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain—i
Open WebUI: Any authenticated user can read other users' private notes via Socket.IO
CVE-2026-54022
### Summary The `ydoc:document:join` Socket.IO handler checks note ownership only when the `document_id` starts with `n
OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin
CVE-2026-53840
### Summary OpenClaw supports remote MCP Streamable HTTP servers with operator-configured custom headers. In affected r
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
[原创]探索CVE-2026-31431的热补丁修复方案
CVE-2026-31431
[原创]探索CVE-2026-31431的热补丁修复方案
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Cookie settings
Cookie settings
Mozilla Monitor
Mozilla Monitor
The Mozilla Manifesto
The Mozilla Manifesto
Mozilla Foundation
Mozilla Foundation