Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs
CVE-2026-59925
## Summary **Type:** Algorithmic-complexity DoS in core emphasis parsing. A long sequence of well-formed `**x**` (stron
2026-07-21 归档
今日共收录 1301 条安全情报，包含 465 个 CVE，462 篇安全通告，以及 91 篇研究论文。
← 返回归档列表Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java...
CVE-2026-56623
Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and
Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java...
CVE-2026-56624
Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java library for client-side an
Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for...
CVE-2026-58624
Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server
Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library...
CVE-2026-56452
Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and ser
FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class that...
CVE-2026-64619
FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class that allows unauthenticated a
The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function...
CVE-2024-51311
The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function of the file /goform/Se
VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability...
CVE-2026-13381
VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability in the /v1.3.0/api/fil
Is That Really My X-Ray? Measuring Internet-Exposed DICOM Services in the Presence of Deception
DICOM是医学影像交换的标准协议，但许多面向互联网的部署缺乏基本安全控制，导致敏感患者数据暴露。现有测量方法因蜜罐、网络望远镜等欺骗伪影而高估实际暴露量。本文提出一种噪声感知的测量方法，结合主动IPv4全扫描和被动蜜罐部署。主动扫描使用伦
京公网安备 11000002002063号
该输入为一个公安备案号信息，并非威胁情报文章。来源标注为360CERT安全报告但实际URL为公安备案查询页面，无有效安全内容摘要。因此无法生成威胁情报分析。
（总）网出证（京）字第281号
该输入来自360CERT安全报告，但提供的URL指向的是360.cn的许可证页面（网出证（京）字第281号），而非实际的威胁情报报告。标题与安全内容无关，摘要为空，且无任何CVE、威胁行为者、恶意软件家族、受影响行业或地区等具体信息。标签中
京网文〔2020〕6051-1195号
根据提供的输入，原文标题为“京网文〔2020〕6051-1195号”，来源为360CERT安全报告，但未提供任何具体的技术细节、威胁行为者、恶意软件家族、受影响行业或地区等信息。标签提及 report、malware、apt、360，但缺乏
京ICP证080047号[京ICP备08010314号-6]
该条情报数据可能存在错误或为测试样本。标题为“京ICP证080047号[京ICP备08010314号-6]”，该信息通常出现在中国网站ICP备案中，而非安全报告内容。来源URL指向工信部备案查询网站（beian.miit.gov.cn），但
A vulnerability was identified in itsourcecode Hospital Management System 1.0. This vulnerability affects unknown code of the file /prescriptionorder.php. Such manipulation of t...
CVE-2026-16334
该漏洞影响 itsourcecode Hospital Management System 1.0 版本。漏洞位于 /prescriptionorder.php 文件中，参数 editid 存在 SQL 注入漏洞。攻击者可以通过远程方式，利
A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/save_ajax.php. Such manipulation of the argument M...
CVE-2026-16331
CVE-2026-16331 影响 D-Link DNS-320 网络存储设备（固件版本 1.0.2）。该漏洞存在于 /web/function/save_ajax.php 文件的未知函数中，远程攻击者无需身份验证即可通过操纵参数 "Mal
Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty SPDY header decoding continues inflating...
CVE-2026-55833
Netty 是一个用于开发协议服务器和客户端的网络应用框架。在 4.1.136.Final 和 4.2.16.Final 之前的版本中，Netty SPDY 头部解码存在一个压缩放大漏洞。当原始头部解析器已超过 `maxHeaderSize
Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty's SPDY SETTINGS decoder accepts a peer-d...
CVE-2026-55831
CVE-2026-55831 是 Netty 网络应用框架中的安全漏洞，影响 SPDY/3.1 协议的 SETTINGS 帧解码器。在 Netty 4.1.136.Final 之前及 4.2.16.Final 之前的版本中，解码器未对 pe
Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity...
CVE-2026-15905
CVE-2026-15905 是 Google Chrome 浏览器 Aura 组件中的一个 Use after free（释放后使用）漏洞。该漏洞存在于 Chrome 150.0.7871.128 之前的版本中。攻击者可以利用恶意文件触发
Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromi...
CVE-2026-15903
该漏洞存在于 Google Chrome 浏览器的 V8 JavaScript 引擎中，影响早于 150.0.7871.128 版本。漏洞类型为越界读写（Out-of-bounds read and write），攻击者可通过构造特制的 H
Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security ...
CVE-2026-15902
CVE-2026-15902 是 Google Chrome（Chromium）浏览器中 Cast 组件的一个释放后使用（Use After Free）漏洞。该漏洞影响 Chrome 150.0.7871.128 之前的所有版本。攻击者可以