Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue...

CVE-2026-58590

Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue affects FlowDrop versions: f

历史摘要 · 未重新核验 · GitHub Advisory

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...

CVE-2026-58588

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canv

历史摘要 · 未重新核验 · GitHub Advisory

vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions: *.*.

CVE-2026-11913

vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions: *.*.

历史摘要 · 未重新核验 · GitHub Advisory

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in...

CVE-2026-55809

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Flag attendance f

历史摘要 · 未重新核验 · GitHub Advisory

melange: Incomplete package integrity verification allows data section substitution

CVE-2026-54174

Previously, Apko verified the control section hash (`.PKGINFO` etc.) against the signed `APKINDEX`, but never verified t

历史摘要 · 未重新核验 · GitHub Advisory

Excon does not redact additional sensitive/risky headers when following redirects

CVE-2026-54171

### Impact The redirect follower middleware previously failed to strip a number of headers that are known to be sensitiv

历史摘要 · 未重新核验 · GitHub Advisory

Secure Headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input

CVE-2026-54163

## Summary `secure_headers` builds the `Content-Security-Policy` value by stitching every configured directive together

历史摘要 · 未重新核验 · GitHub Advisory

BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py

CVE-2026-54071

## Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py ### Summary BabelDOC's vend

历史摘要 · 未重新核验 · GitHub Advisory

Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_search

CVE-2026-54136

### Summary A resource-scoped API token can read script contents outside its allowed path scope via `GET /api/w/{worksp

历史摘要 · 未重新核验 · GitHub Advisory

Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS)

CVE-2026-54063

## Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS) ### Summary The `checkSheet()` functio

历史摘要 · 未重新核验 · GitHub Advisory

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

历史摘要 · 未重新核验 · CNCERT

Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。

Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。

历史摘要 · 未重新核验 · 知道创宇 / Seebug

Cookie settings

Cookie settings

历史摘要 · 未重新核验 · Mozilla Security Advisories

Mozilla Monitor

Mozilla Monitor

历史摘要 · 未重新核验 · Mozilla Security Advisories

The Mozilla Manifesto

The Mozilla Manifesto

历史摘要 · 未重新核验 · Mozilla Security Advisories

Mozilla Foundation

Mozilla Foundation

历史摘要 · 未重新核验 · Mozilla Security Advisories

Accessibility Policy

Accessibility Policy

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

Create an Account

Create an Account

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

Instructions for subscribing to email notifications

Instructions for subscribing to email notifications

历史摘要 · 未重新核验 · Oracle Critical Patch Updates