goshs: Share-link ?token=… redemption races past download limit
CVE-2026-50139
# Share-link `?token=…` redemption races past download limit **Ecosystem:** Go **Package:** `goshs.de/goshs/v2` (`githu
2026-07-02 归档
今日共收录 1714 条安全情报，包含 914 个 CVE，384 篇安全通告，以及 113 篇研究论文。
← 返回归档列表Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command...
CVE-2026-58457
Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability
oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens
CVE-2026-48978
## Summary oras-go's `auth.Client` follows the `realm` URL from a registry's `WWW-Authenticate: Bearer` challenge witho
Rancher has Privilege Escalation from Project Owner to Host
CVE-2026-41052
### Impact A vulnerability has been identified in Rancher Manager that allows users assigned the Project Owner role to
Rancher has over-inclusive team membership expansion in GitHub App authentication provider
CVE-2026-41053
### Impact A vulnerability has been identified within Rancher Manager in the GitHub App authentication provider. When ev
Rancher Fleet has SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml
CVE-2026-44936
### Impact A vulnerability has been identified in Fleet when the `helmRepoURLRegex` field isn't set on a `GitRepo` resou
Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components
CVE-2026-44937
### Impact A vulnerability has been identified in Fleet when the webhook endpoint is configured without a secret; an att
Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent
CVE-2026-44938
### Impact A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive k
QUIC has Broken TLS verification
CVE-2026-49457
### Impact The QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signatur
Firewall for AI
Firewall for AI
FortiBleed credential-theft campaign linked to Lynx ransomware
The massive FortiBleed credential theft campaign has been linked to the INC and Lynx ransomware operations, suggesting t
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
Background Security Improvements for iOS, iPadOS, and macOS
iOS 16.7.15 and iPadOS 16.7.15
iOS 16.7.15 and iPadOS 16.7.15