Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator granted access scoped to `com_icagenda` only could enumerate...

CVE-2026-71570

该漏洞影响Joomla扩展icagenda，版本低于2.0.0-4.0.11（具体版本范围待确认）。漏洞类型为ACL绕过，允许后台操作员绕过访问控制限制。一个被授予仅限'com_icagenda'组件访问权限的后台用户，能够利用此漏洞枚举J

历史摘要 · 未重新核验 · NVD

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.

CVE-2026-50523

CVE-2026-50523 是微软 PowerShell 中存在的一个命令注入漏洞。该漏洞源于对命令中特殊元素（special elements）的中和不当（improper neutralization），属于典型的命令注入（comma

历史摘要 · 未重新核验 · NVD

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execu...

CVE-2026-73680

CVE-2026-73680 是 Cockpit CMS（一个开源内容管理系统）中的命令注入漏洞，影响 2.14.0 及更早版本。漏洞存在于其 FFmpeg 视频处理集成中。由于系统在将上传视频的文件名拼接到 shell 命令时，未先进行有

历史摘要 · 未重新核验 · NVD

Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda co...

CVE-2026-71571

CVE-2026-71571 是 Joomla 扩展 iCagenda 中存在的一个已认证 SQL 注入漏洞。受影响的版本为低于 2.0.0-4.0.11 的 iCagenda 扩展。该漏洞源于 iCagenda 组件中对数字过滤器（num

历史摘要 · 未重新核验 · NVD

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

历史摘要 · 未重新核验 · CrowdStrike

Cloud ManagerManage your cloud computing services

Cloud ManagerManage your cloud computing services

历史摘要 · 未重新核验 · Akamai Security Research

See all Cloud Computing

See all Cloud Computing

历史摘要 · 未重新核验 · Akamai Security Research

智利银行在勒索软件攻击后关闭所有分行

智利银行在勒索软件攻击后关闭所有分行

历史摘要 · 未重新核验 · CNCERT

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

历史摘要 · 未重新核验 · CrowdStrike

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

历史摘要 · 未重新核验 · CrowdStrike

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

历史摘要 · 未重新核验 · CrowdStrike

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

历史摘要 · 未重新核验 · CrowdStrike

CrowdStrike Services and Agentic MDR Put the Agentic SOC in Reach

CrowdStrike Services and Agentic MDR Put the Agentic SOC in Reach

历史摘要 · 未重新核验 · CrowdStrike

Threat Hunting & Intel

Threat Hunting & Intel

历史摘要 · 未重新核验 · CrowdStrike

Endpoint Security & XDR

Endpoint Security & XDR

历史摘要 · 未重新核验 · CrowdStrike

Engineering & Tech

Engineering & Tech

历史摘要 · 未重新核验 · CrowdStrike

EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware

EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware

历史摘要 · 未重新核验 · CrowdStrike

Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS

Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS

历史摘要 · 未重新核验 · CrowdStrike

CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting

CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting

历史摘要 · 未重新核验 · CrowdStrike

CrowdStrike Researchers Develop Custom XGBoost Objective to Improve ML Model Release Stability

CrowdStrike Researchers Develop Custom XGBoost Objective to Improve ML Model Release Stability

历史摘要 · 未重新核验 · CrowdStrike