Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. A...
CVE-2026-44909
Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. A remote, unauthenticate
2026-07-24 归档
今日共收录 841 条安全情报，包含 0 个 CVE，432 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document...
CVE-2026-65695
Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attacker
Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in...
CVE-2026-65760
Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0
A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that...
CVE-2026-16768
A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined pale
Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension...
CVE-2026-65759
Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical
Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics...
CVE-2026-65697
Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics collection endpoint that
CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference ...
CVE-2026-65917
CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference (IDOR) vulnerability in
Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara...
CVE-2026-11804
Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux
CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability...
CVE-2026-65916
CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCre
Logto bypasses OIDC nonce validation when the nonce claim is absent from the id_token, enabling...
CVE-2026-15612
Logto bypasses OIDC nonce validation when the nonce claim is absent from the id_token, enabling replay of authentication
Logto performs principal lookup without normalizing email and identifier strings, enabling...
CVE-2026-15617
Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unaut
pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)
CVE-2026-59935
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsi
pypdf: Possible infinite loop for not terminated inline images
CVE-2026-59936
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsi
pypdf: Possible long runtimes for repeated malformed cross-reference entries
CVE-2026-59937
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-re
pypdf: Possible large memory usage for wrong image dimensions
CVE-2026-59938
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loa
PHPSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion
CVE-2026-59933
## Summary PhpSpreadsheet's OLE reader follows sector chains from attacker-controlled XLS/OLE metadata without detectin
PHPSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion
CVE-2026-59932
## Summary PhpSpreadsheet's Gnumeric reader reads attacker-supplied `.gnumeric` files into memory and, when the file st
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Cookie settings
Cookie settings
Mozilla Monitor
Mozilla Monitor