Nezha Monitoring: Authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing
CVE-2026-53520
### Summary An authenticated non-admin user who owns any server can create or update a NAT profile whose `domain` is equ
2026-06-27 归档
今日共收录 1218 条安全情报，包含 478 个 CVE，392 篇安全通告，以及 115 篇研究论文。
← 返回归档列表YARD static cache reads raw traversal paths before router sanitization
CVE-2026-49342
### Summary YARD's static cache lookup reads a request path before the router's path cleanup runs. When a server is conf
Hackney: `ssl:connect/2` post-handshake upgrade has no timeout
CVE-2026-47071
### Summary The SOCKS5 transport in `src/hackney_socks5.erl` correctly applies the caller-supplied timeout to the SOCKS
Cargo crates in third party registries can override the cached source of other crates
CVE-2026-5223
The Rust Security Response Team was notified that Cargo incorrectly handled symlinks inside of crate tarballs downloaded
Cargo can be coerced to share credentials between registries
CVE-2026-5222
The Rust Security Response Team was notified that Cargo incorrectly normalized the URLs of third-party registries using
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
多款Huawei路由器信息泄露漏洞
多款Huawei路由器信息泄露漏洞
LOKI: State-Aware Fuzzing Framework for the Implementation of Blockchain Consensus Protocols.
本文提出 LOKI，一个针对区块链共识协议实现的状态感知模糊测试框架。区块链共识协议负责协调节点对交易结果达成一致，其实现中的内存相关和共识逻辑漏洞可能造成严重威胁。现有模糊测试工具无法处理分布式节点的复杂共识状态，生成大量无效数据包，难以
Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated...
CVE-2026-28701
Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape
pnpm: `stage download` writes outside its destination directory via manifest name/version traversal
CVE-2026-55700
## Summary The staged-tarball filename traversal reported as GHSA-v23m-ccfg-pq9h / CAND-PNPM-038 is fixed on `main` by
Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS
CVE-2026-53522
## 1. Description The Nezha dashboard exposes two endpoints that create long-lived WebSocket streams to monitored agent
Statamic Vulnerable to Server-Side Request Forgery via Glide (DNS rebinding)
CVE-2026-54242
### Impact The Glide image proxy's URL validation could be bypassed using DNS rebinding. The remote hostname was valida
Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key
CVE-2026-53519
### Summary `fallbackToFrontend` in the dashboard's `NoRoute` handler treats any URL whose **raw string** starts with `/
PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option
CVE-2026-49359
### Summary `pontedilana/php-weasyprint` fetches the content of option values server-side via `file_get_contents()` whe
Hackney has SSRF allowlist bypass in hackney_url:normalize/2 via percent-encoded host
CVE-2026-47076
### Summary `hackney_url:normalize/2` URL-decodes the host component of a parsed URL, but the caller's SSRF allowlist r
Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxy
CVE-2026-49262
### Summary The administrative proxy route (`cmsproxy`) in Aimeos Pagible CMS is vulnerable to a Server-Side Request For
In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix NTMP DMA use...
CVE-2026-53300
In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix NTMP DMA use-after-free issue The
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: Place...
CVE-2026-53317
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: Place upper limit on station AI
Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign
A Chinese-speaking advanced persistent threat (APT) actor has been linked to a new custom backdoor called TinyRCT as par