Inefficient Algorithmic Complexity vulnerability in ash-project ash_paper_trail allows a user who can submit a large array attribute to a paper-trailed create or update action t...

CVE-2026-77831

CVE-2026-77831 是 ash-project 的 ash_paper_trail 组件中存在的一处低效算法复杂度漏洞。该组件用于为 Elixir 的 Ash 框架提供数据变更审计追踪功能，在启用完整差异（full-diff）变更

历史摘要 · 未重新核验 · NVD

Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource to recover the plai...

CVE-2026-75847

CVE-2026-75847 是 ash-project 开发的 ash_paper_trail 组件中的一个敏感信息明文存储漏洞。该组件用于为 Elixir 的 Ash 框架提供数据版本追踪功能。漏洞成因在于：AshPaperTrail

历史摘要 · 未重新核验 · NVD

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /student_edit1.php. Executing...

CVE-2026-82424

CVE-2026-82424 是 PHPGurukul Student Information System 1.0 中被发现的一个安全弱点，涉及文件 /student_edit1.php 的未知功能。攻击者可以通过远程方式操纵参数 ID，

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint...

CVE-2026-82423

CVE-2026-82423 是开源电商项目 macrozheng mall（版本不超过 1.0.3）中存在的一处业务逻辑漏洞。该漏洞位于支付成功接口 /order/paySuccess 中，具体涉及未知函数对参数 orderId 的处理。

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/emp_del.php. The manipulation of the argum...

CVE-2026-82422

CVE-2026-82422 影响 itsourcecode Sales and Inventory System 1.0。该漏洞位于 /pages/emp_del.php 文件中的未知函数，攻击者可对参数 ID 进行操纵，导致 SQL 注

历史摘要 · 未重新核验 · NVD

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/emp_edit.php. The manipulation of th...

CVE-2026-82421

该漏洞位于 itsourcecode Sales and Inventory System 1.0 的 /pages/emp_edit.php 文件中，攻击者可通过操纵参数 ID 触发 SQL 注入。该漏洞影响的是未知处理逻辑，CVSS 评

历史摘要 · 未重新核验 · NVD

The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.4.6. This is due to the mo_saml_login_validat...

CVE-2026-75807

CVE-2026-75807 是 WordPress 插件 'SAML Single Sign On – SSO Login'（版本 ≤ 5.4.6）中一个严重的认证绕过漏洞。该插件用于通过 SAML 协议实现单点登录，本漏洞影响了其 AC

历史摘要 · 未重新核验 · NVD

Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection in its link-metadata fetcher, allowing unauthenticated attackers to bypass IP v...

CVE-2026-82476

CVE-2026-82476 影响 Memos 0.30.0 及更早版本。该漏洞源于其链接元数据抓取器在进行 SSRF 防护时未正确过滤 100.64.0.0/10 这个运营商级 NAT（CGNAT）地址范围。由于该范围内的 IP 地址可能

历史摘要 · 未重新核验 · NVD

iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can...

CVE-2026-82475

CVE-2026-82475 是科大讯飞 astron-agent 产品（版本至 1.1.1）中存在的一个授权绕过漏洞。该漏洞位于 copyFlow 端点，该端点在复制工作流时未能验证工作流的所有权归属。已认证的攻击者可以利用此缺陷，通过枚

历史摘要 · 未重新核验 · NVD

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute den...

CVE-2026-82474

CVE-2026-82474 影响 Sudo 1.9.17p2 及之前版本。该漏洞存在于 sudo 基于 ptrace 的拦截模式中，具体表现为对 execveat 系统调用未正确应用拦截策略检查。攻击者若已被授权运行特定命令（即处于策略允

历史摘要 · 未重新核验 · NVD

Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Unauthenticated atta...

CVE-2026-82472

Documenso在2.13.0之前版本存在未授权文件上传漏洞。其/api/files/upload-pdf端点未实现任何认证机制，攻击者无需登录、无需API密钥即可直接上传PDF文件。由于该接口没有上传大小和数量限制，未认证攻击者可以反复

历史摘要 · 未重新核验 · NVD

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

历史摘要 · 未重新核验 · CrowdStrike

Cloud ManagerManage your cloud computing services

Cloud ManagerManage your cloud computing services

历史摘要 · 未重新核验 · Akamai Security Research

See all Cloud Computing

See all Cloud Computing

历史摘要 · 未重新核验 · Akamai Security Research

智利银行在勒索软件攻击后关闭所有分行

智利银行在勒索软件攻击后关闭所有分行

历史摘要 · 未重新核验 · CNCERT

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

历史摘要 · 未重新核验 · CrowdStrike

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

历史摘要 · 未重新核验 · CrowdStrike

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

历史摘要 · 未重新核验 · CrowdStrike

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

历史摘要 · 未重新核验 · CrowdStrike

Threat Hunting & Intel

Threat Hunting & Intel

历史摘要 · 未重新核验 · CrowdStrike