EverOS: Path traversal in EverOS /api/v1/memory/add via unvalidated sender_id

EverOS versions 1.0.0 and earlier are vulnerable to path traversal in the POST /api/v1/memory/add ingestion endpoint. Th

历史摘要 · 未重新核验 · GitHub Advisory

MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error

### Impact If the Unpacker is used repeatedly after an error occurs, the process may crash with a SEGV. If the Unpacke

历史摘要 · 未重新核验 · GitHub Advisory

Gogs: XSS in .ipynb files renderer due to outdated notebookjs

### Summary Gogs renders Jupyter notebook files (`.ipynb`) using [jsvine/notebookjs](https://github.com/jsvine/notebook

历史摘要 · 未重新核验 · GitHub Advisory

parse-server: LiveQuery discloses object data to a subscriber across an ACL read-access change

### Impact A Parse Server LiveQuery subscriber can receive object field values they are not authorized to read when a s

历史摘要 · 未重新核验 · GitHub Advisory

SearXNG MCP Server: DNS-resolved Private Hostname SSRF in `web_url_read`

## DNS-resolved Private Hostname SSRF in `web_url_read` ### Summary The `web_url_read` MCP tool in `mcp-searxng` is vu

历史摘要 · 未重新核验 · GitHub Advisory

SearXNG MCP Server: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`

## Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read` ### Summary The `web_url_read` MCP tool in m

历史摘要 · 未重新核验 · GitHub Advisory

Network-AI: EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data

### Summary `EnvironmentManager.restore(env, backupId)` computes the backup path with `join(envDir, '.backups', backupId

历史摘要 · 未重新核验 · GitHub Advisory

Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups

### Summary `EnvironmentManager.backup()` recursively collects files using `_collectBackupFiles()`. `_collectBackupFiles

历史摘要 · 未重新核验 · GitHub Advisory

Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning

### Summary `EnvironmentManager.listBackups()` reads each backup's `_manifest.json` and trusts the manifest's `path` fie

历史摘要 · 未重新核验 · GitHub Advisory

MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested

PathFilter's deny-list glob patterns are anchored, so `.git`, `.obsidian`, and `node_modules` were only blocked at the v

历史摘要 · 未重新核验 · GitHub Advisory

http4k: `ServerFilters.DigestAuth` / `DigestAuthProvider` defaulted to an always-true nonce verifier, disabling replay protection in default deployments

### Impact `ServerFilters.DigestAuth` and the underlying `DigestAuthProvider` both defaulted their `nonceVerifier` para

历史摘要 · 未重新核验 · GitHub Advisory

http4k: BasicCookieStorage` (renamed `InsecureCookieStorage`) did not enforce RFC 6265 cookie scoping; new `DefaultCookieStorage` is now the default

### Impact The previous `BasicCookieStorage` did not enforce RFC 6265 scoping rules around cookie domain, path, and `Se

历史摘要 · 未重新核验 · GitHub Advisory

http4k: `HmacSha256.hash` (despite the `Hmac` naming) computed a plain unkeyed digest; clarified by deprecation in favour of `Sha256.hash` / `Sha256.hmac`

### Impact The `HmacSha256` class contained two functions: - `hash(payload)` — a plain unkeyed SHA-256 digest. The `Hma

历史摘要 · 未重新核验 · GitHub Advisory

http4k: `reverseProxy()` defaulted to substring (`Contains`) matching on `Host`; tightened to `Exact`

### Impact `reverseProxy()` and `reverseProxyRouting()` matched configured vhosts by substring on the `Host` header (`C

历史摘要 · 未重新核验 · GitHub Advisory

Ultimate Sitemap Parser (USP): XML Entity Expansion (Billion Laughs) DoS in XMLSitemapParser

## XML Entity Expansion (Billion Laughs) DoS in XMLSitemapParser ### Summary `ultimate-sitemap-parser` version 1.8.0 a

历史摘要 · 未重新核验 · GitHub Advisory

Ultimate Sitemap Parser (USP): Gzip Decompression Bomb Bypasses Sitemap Size Limit

## Gzip Decompression Bomb Bypasses Sitemap Size Limit ### Summary `ultimate-sitemap-parser` enforces a 100 MiB size l

历史摘要 · 未重新核验 · GitHub Advisory

[分享]全平台IDAPro 9.4 beta1+汉化补丁+新版注册机

[分享]全平台IDAPro 9.4 beta1+汉化补丁+新版注册机

历史摘要 · 未重新核验 · 看雪

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

CVE-2026-42530

F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to

历史摘要 · 未重新核验 · The Hacker News

Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure

CVE-2026-20253

CISA has given federal agencies only three days to patch CVE-2026-20253, which can be exploited for unauthenticated remo

历史摘要 · 未重新核验 · SecurityWeek

Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone

CVE-2025-20701

Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited

历史摘要 · 未重新核验 · The Hacker News