Kimai has Server-Side Request Forgery in Invoice PDF Rendering via Markdown Image URLs
CVE-2026-49865
### Summary Kimai 2.56.0 contains a server-side request forgery vulnerability in its invoice PDF preview and generation
2026-07-11 归档
今日共收录 1315 条安全情报，包含 488 个 CVE，410 篇安全通告，以及 120 篇研究论文。
← 返回归档列表morgan vulnerable to Log Forging via unneutralized control characters in :remote-user
CVE-2026-5078
### Impact Morgan's `:remote-user` token extracts the Basic auth username from the `Authorization` header and writes it
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot
Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardw
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Cookie settings
Cookie settings
Mozilla Monitor
Mozilla Monitor
The Mozilla Manifesto
The Mozilla Manifesto
Mozilla Foundation
Mozilla Foundation
Accessibility Policy
Accessibility Policy
Create an Account
Create an Account
Instructions for subscribing to email notifications
Instructions for subscribing to email notifications
Product Security Home
Product Security Home
Security Bulletins
Security Bulletins
Priority and Severity Ratings
Priority and Severity Ratings
Newsletter Subscription
Newsletter Subscription
Adobe Security Notifications
Adobe Security Notifications
WL-330NUL远程命令执行漏洞
WL-330NUL远程命令执行漏洞
Tibbo Technology AggreGate远程代码执行漏洞
Tibbo Technology AggreGate远程代码执行漏洞