Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir
CVE-2026-48126
### Summary When algernon is started with `--domain` (or `--letsencrypt`, which silently turns on `--domain` at `engine
2026-06-25 归档
今日共收录 1364 条安全情报，包含 629 个 CVE，391 篇安全通告，以及 120 篇研究论文。
← 返回归档列表jackson-databind has @JsonView bypass for setterless creator properties
CVE-2026-54517
## Summary In `BeanDeserializer._deserializeUsingPropertyBased`, the active-view (`@JsonView`) filter was applied only t
jackson-databind's renamed @JsonIgnore'd setters can deserialize via private fields
CVE-2026-54516
## Summary `POJOPropertiesCollector._renameProperties()` allows a property with `@JsonProperty("renamed")` on the getter
jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnoreProperties
CVE-2026-54515
## Summary In `BeanDeserializerBase.createContextual()`, per-property `@JsonIgnoreProperties` exclusions are applied by
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
[原创]探索CVE-2026-31431的热补丁修复方案
CVE-2026-31431
[原创]探索CVE-2026-31431的热补丁修复方案
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Cookie settings
Cookie settings
Mozilla Monitor
Mozilla Monitor
The Mozilla Manifesto
The Mozilla Manifesto
Mozilla Foundation
Mozilla Foundation
Accessibility Policy
Accessibility Policy
Create an Account
Create an Account
Instructions for subscribing to email notifications
Instructions for subscribing to email notifications
WL-330NUL远程命令执行漏洞
WL-330NUL远程命令执行漏洞
Tibbo Technology AggreGate远程代码执行漏洞
Tibbo Technology AggreGate远程代码执行漏洞
Symantec Endpoint Protection Manager-RU6-MP3任意操作系统命令执行漏洞
Symantec Endpoint Protection Manager-RU6-MP3任意操作系统命令执行漏洞
Joomla “Ja-Ka-Filter-And-Search” 组件 SQL 注入漏洞
Joomla “Ja-Ka-Filter-And-Search” 组件 SQL 注入漏洞
京公网安备 11010502034610号
京公网安备 11010502034610号