Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities.
论文《Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities》介绍了一种名为 Atropos 的模糊测试技术，旨在高效发现 Web 应用中
2026-08-24 归档
今日共收录 798 条安全情报，包含 82 个 CVE，390 篇安全通告，以及 72 篇研究论文。
← 返回归档列表Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session...
CVE-2026-19565
Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock
justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant...
CVE-2026-8445
justhtml versions are preserved, so untrusted input that is safe in to_html() — including entity-decoded text (e.g. <
justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active...
CVE-2026-7808
justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g.,
justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site...
CVE-2026-5751
justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting (mXSS) vulnerability
privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to...
CVE-2026-78155
privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privi
A flaw has been found in sambitraj Student-Management-System up to...
CVE-2026-78057
A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affect
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function...
CVE-2026-78050
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub_41AD7C of the file /cgi-b
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that...
CVE-2026-47895
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but no
In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state...
CVE-2026-74720
In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
Background Security Improvements for iOS, iPadOS, and macOS
iOS 16.7.15 and iPadOS 16.7.15
iOS 16.7.15 and iPadOS 16.7.15
iOS 15.8.7 and iPadOS 15.8.7
iOS 15.8.7 and iPadOS 15.8.7