NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an...

CVE-2026-24271

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause alloc

历史摘要 · 未重新核验 · GitHub Advisory

NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper...

CVE-2026-24226

NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation

历史摘要 · 未重新核验 · GitHub Advisory

Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend

CVE-2026-61549

### Impact A privilege escalation vulnerability affects Woodpecker instances using the **Kubernetes backend**. The pip

历史摘要 · 未重新核验 · GitHub Advisory

nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens

CVE-2026-55513

### Summary The `nebula-mgmt` Web UI host-creation path ignores both the server-wide `enrollment_token_ttl` security set

历史摘要 · 未重新核验 · GitHub Advisory

Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode

CVE-2026-54629

## Summary Anyquery's `server` mode lacks input sanitization and access control over its built-in SQLite virtual table m

历史摘要 · 未重新核验 · GitHub Advisory

nebula-mesh: Operator session tokens stored in plaintext in the database

CVE-2026-53603

## Impact Operator session tokens are stored in plaintext in the `operator_sessions` table (the `token` column is the P

历史摘要 · 未重新核验 · GitHub Advisory

Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__

CVE-2026-54335

### Impact The `_.merge(target, source)` utility exported by `@feathersjs/commons` recursively merges `source` into `ta

历史摘要 · 未重新核验 · GitHub Advisory

yutu: Arbitrary File Write via MCP `caption-download` Tool

CVE-2026-50158

## Arbitrary File Write via MCP `caption-download` Tool ### Summary The `caption-download` MCP tool in yutu passes the

历史摘要 · 未重新核验 · GitHub Advisory

Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges

CVE-2026-50131

### Summary Fedify previously addressed SSRF/internal network access in GHSA-p9cg-vqcc-grcx by adding public URL valida

历史摘要 · 未重新核验 · GitHub Advisory

MKP: Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion

CVE-2026-50125

## Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion ### Summary The MK

历史摘要 · 未重新核验 · GitHub Advisory

Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions

CVE-2026-50018

### Summary: Remote post-serve actions use `http.DefaultClient` without any timeout configuration. When the remote endp

历史摘要 · 未重新核验 · GitHub Advisory

K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression

CVE-2026-54250

#### Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files contai

历史摘要 · 未重新核验 · GitHub Advisory

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

历史摘要 · 未重新核验 · CNCERT

Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。

Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。

历史摘要 · 未重新核验 · 知道创宇 / Seebug

Cookie settings

Cookie settings

历史摘要 · 未重新核验 · Mozilla Security Advisories

Mozilla Monitor

Mozilla Monitor

历史摘要 · 未重新核验 · Mozilla Security Advisories

The Mozilla Manifesto

The Mozilla Manifesto

历史摘要 · 未重新核验 · Mozilla Security Advisories

Mozilla Foundation

Mozilla Foundation

历史摘要 · 未重新核验 · Mozilla Security Advisories

Accessibility Policy

Accessibility Policy

历史摘要 · 未重新核验 · Oracle Critical Patch Updates