A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrator or a Search Custom Resource (CR) editor, to inject mali...

CVE-2026-71472

A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrato

历史摘要 · 未重新核验 · NVD

An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration (s...

CVE-2026-68004

An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP pub

历史摘要 · 未重新核验 · NVD

File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code

CVE-2026-67678

File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code

历史摘要 · 未重新核验 · NVD

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certai...

CVE-2026-19478

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.

历史摘要 · 未重新核验 · NVD

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscriptio...

CVE-2026-66792

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed clust

历史摘要 · 未重新核验 · NVD

A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the con...

CVE-2026-50775

A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an

历史摘要 · 未重新核验 · NVD

An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.

CVE-2026-50774

An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.

历史摘要 · 未重新核验 · NVD

An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function.

CVE-2026-50772

An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload t

历史摘要 · 未重新核验 · NVD

An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request.

CVE-2026-50770

An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted reque

历史摘要 · 未重新核验 · NVD

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based) vulnerability. The check conflict endpoint index.php?modu...

CVE-2026-50769

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based)

历史摘要 · 未重新核验 · NVD

In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature

CVE-2026-75045

In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download data

历史摘要 · 未重新核验 · NVD

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, an unauthenticated attacker could send a single request with a crafted colo...

CVE-2026-55674

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, an unauthenticated

历史摘要 · 未重新核验 · NVD

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

历史摘要 · 未重新核验 · CNCERT

Fortinet Acquires AI Security Company Virtue AI

Fortinet will use Virtue AI technology to enhance its AI security portfolio, including for AI models, applications, and

历史摘要 · 未重新核验 · SecurityWeek

An Emulation Anchored Digital Twin Testbed for Cyberattack and Defense Analysis in Hospital IT OT Environments

现代医院越来越依赖整合的信息技术（IT）与运营技术（OT）基础设施来支撑关键医疗服务，但这种融合扩大了网络攻击面，使得在真实系统上安全验证防御机制变得困难。现有测试平台往往只关注独立的IT或OT环境，未能捕捉医疗场景中跨域交互的真实复杂性。

历史摘要 · 未重新核验 · arXiv cs.CR

Trusted Workflow Relays:Cross-Tenant Email Abuse and Composable Red Team Initial-Access Primitives in Multi-Tenant Clouds

本文研究多租户云应用中跨租户通知工作流存在的授权缺陷，这些缺陷可被利用来冒充受信任的提供商服务发送电子邮件。作者将这种模式定义为“可信工作流中继”（Trusted Workflow Relay），类比于经典的未认证SMTP开放中继，但已有区

历史摘要 · 未重新核验 · arXiv cs.CR

京公网安备 11000002002063号

输入仅提供了页面标题“京公网安备 11000002002063号”、来源名称“360CERT 安全报告”以及来源链接（指向公安备案信息页面），未包含任何实质性的威胁情报正文、摘要或可分析的技术细节。tags 中出现“360”、“apt”、“

历史摘要 · 未重新核验 · 360CERT 安全报告

（总）网出证（京）字第281号

该条输入来自360CERT安全报告，但实际内容为“（总）网出证（京）字第281号”，且来源链接指向360.cn的许可证页面。摘要为空，未提供任何漏洞信息、攻击活动、恶意软件家族、受害者行业或地区等威胁情报要素。标签包含360、apt、rep

历史摘要 · 未重新核验 · 360CERT 安全报告

京网文〔2020〕6051-1195号

该输入仅包含版权声明（京网文〔2020〕6051-1195号）及360CERT安全报告的来源信息，未包含任何实质性的威胁情报内容。文章标题、摘要和正文均为空，未提及任何CVE、攻击组织、恶意软件家族、行业、地区或ATT&CK技术。因此，无法

历史摘要 · 未重新核验 · 360CERT 安全报告