FortiBleed campaign used custom FortiGate sniffer to steal credentials

SOCRadar 披露了一起名为 FortiBleed 的大规模攻击活动，该活动针对 Fortinet FortiGate 防火墙设备。攻击者通过利用 FortiGate 中的未知漏洞（可能是已知但未修复的漏洞或配置弱点）获得初始访问权限，

历史摘要 · 未重新核验 · BleepingComputer

@actual-app/sync-server: Disabled OpenID users keep access through existing session tokens

CVE-2026-49229

### Summary In OpenID multi-user mode, disabling a user only blocks future OpenID login for that identity. Existing Act

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: POST /api/attachments/:datasourceId/url is unauthenticated and lets anonymous callers mint S3 PUT pre-signed URLs using stored datasource IAM credentials

CVE-2026-50137

## Summary The Budibase server route `POST /api/attachments/:datasourceId/url` ([`packages/server/src/api/routes/static

历史摘要 · 未重新核验 · GitHub Advisory

Budibase has an Account Impersonation Issue — Chat Identity Link Hijacking via Missing Consent & CSRF

CVE-2026-50132

## Title **Chat Identity Link Hijacking — Attacker Can Silently Map Their Slack/Discord Identity to Any Authenticated B

历史摘要 · 未重新核验 · GitHub Advisory

zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet

CVE-2026-48487

### Impact `_read_character_string` and `_read_string` in `src/zeroconf/_protocol/incoming.py` sliced `self.data[self.o

历史摘要 · 未重新核验 · GitHub Advisory

Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)

CVE-2026-46608

### Summary The Glances XML-RPC server (`glances -s`) introduced a configurable CORS origin list in version 4.5.3 as a

历史摘要 · 未重新核验 · GitHub Advisory

motionEye: Authentication possible via password hash

CVE-2026-46488

### Summary An authentication bypass vulnerability exists due to improper trust in client-controlled cookies. The applic

历史摘要 · 未重新核验 · GitHub Advisory

Paymenter has Blind Unauthenticated SSRF on the Paypal gateway module

CVE-2026-44583

### Summary The PayPal webhook endpoint `/extensions/paypal/webhook` processes the `PAYPAL-CERT-URL` HTTP header without

历史摘要 · 未重新核验 · GitHub Advisory

OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`

CVE-2026-44202

OpenAM (Open Identity Platform) is an open-source Identity and Access Management (IAM) platform derived from ForgeRock O

历史摘要 · 未重新核验 · GitHub Advisory

AVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment Data

CVE-2026-33731

## Summary The Authorize.Net webhook handler at `plugin/AuthorizeNet/webhook.php` contains a signature verification byp

历史摘要 · 未重新核验 · GitHub Advisory

ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

CVE-2025-67303

### Impact An **Unprotected Alternate Channel (CWE-420)** vulnerability was discovered in ComfyUI-Manager versions prio

历史摘要 · 未重新核验 · GitHub Advisory

IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in...

CVE-2026-7253

IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in Sterling File Gateway, due t

历史摘要 · 未重新核验 · GitHub Advisory

Ivanti Endpoint Manager Mobile代码注入漏洞

Ivanti Endpoint Manager Mobile代码注入漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug

Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)

Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)

历史摘要 · 未重新核验 · 知道创宇 / Seebug

Budibase has arbitrary file read by workspace-builder via PWA-zip symlink upload

CVE-2026-54352

## Summary `POST /api/pwa/process-zip` at `packages/server/src/api/routes/static.ts:24` accepts a builder-uploaded `.zi

历史摘要 · 未重新核验 · GitHub Advisory

OpenAM has pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)

CVE-2026-44203

### Summary The OAuth 2.0 / OpenID Connect authorization endpoint does not sufficiently sanitize certain user-supplied

历史摘要 · 未重新核验 · GitHub Advisory

Paymenter vulnerable to Remote Code Execution via public file uploads

CVE-2025-58048

### Impact The ticket attachments functionality in Paymenter allows a malicious authenticated user to upload arbitrary

历史摘要 · 未重新核验 · GitHub Advisory

AI Agent 的信任边界：从中转 API 到 Agent Tool Call 的供应链劫持

本文由先知社区发布，标题为《AI Agent的信任边界：从中转API到Agent Tool Call的供应链劫持》，属于安全研究类文章。文章讨论了AI Agent（智能代理）在调用外部API（中转API）和执行工具调用（Tool Call）

历史摘要 · 未重新核验 · 先知社区

CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access

CrowdStrike 与 Zscaler 宣布合作，将持续身份安全集成到零信任访问架构中。该合作旨在解决传统身份验证在零信任环境中的局限性，通过将 CrowdStrike Falcon 平台的终端安全遥测与 Zscaler 的零信任网络访

历史摘要 · 未重新核验 · CrowdStrike

CrowdStrike Announces Continuous Identity for AI Agents

CrowdStrike Announces Continuous Identity for AI Agents

历史摘要 · 未重新核验 · CrowdStrike