A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit.php. The manipulation of the argument...

CVE-2026-82609

该漏洞影响 itsourcecode Sales and Inventory System 1.0 版本。漏洞位于文件 /pages/inv_edit.php 中，攻击者可操纵参数 ID 触发 SQL 注入。由于该参数未经过充分的输入验证或

历史摘要 · 未重新核验 · NVD

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_admin lets any client that can reach the admin LiveView exhaust the BEAM atom table and cra...

CVE-2026-82722

CVE-2026-82722 是 ash-project 的 ash_admin 组件中的一个资源分配无限制漏洞。该漏洞影响 ash_admin 版本 0.1.0 至 1.3.1 之前（不含 1.3.1）。任何能够访问 admin Live

历史摘要 · 未重新核验 · NVD

Improper Encoding or Escaping of Output vulnerability in ash-project ash_admin lets an attacker who controls a record's string primary key rewrite the target of AshAdmin's row-a...

CVE-2026-82681

CVE-2026-82681是ash-project的ash_admin组件中存在的一处输出编码不当漏洞。该组件的Table、DataTable和Show组件在构造行操作链接时，将记录的主键以及表名、域名、资源名直接通过字符串拼接插入URL

历史摘要 · 未重新核验 · NVD

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin allows writing attacker-controlled bytes to arbitrary paths o...

CVE-2026-82673

CVE-2026-82673 是 ash-project 的 ash_admin 组件中的一个路径遍历漏洞。该组件用于 Ash 框架的管理界面。漏洞根因在于处理文件上传时，服务端将浏览器提交的文件名直接用于构建目标路径：首先通过 Path.

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads t...

CVE-2026-82605

CVE-2026-82605 是影响 BareBones BBEdit 版本 15.5.5 及更早版本的一个拒绝服务漏洞。该漏洞位于 Lasso 语言分词器（Lasso Language Tokenizer）的未知函数中，攻击者可利用特制的

历史摘要 · 未重新核验 · NVD

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_admin turns a record-lookup URL into an equality oracle over sensitive attributes. AshAdmin.He...

CVE-2026-81853

CVE-2026-81853 是 ash-project 的 ash_admin 组件中的一个授权绕过漏洞（类型为“通过用户控制键实现授权绕过”）。漏洞根源在于 AshAdmin.Helpers.decode_primary_key/2 函

历史摘要 · 未重新核验 · NVD

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

历史摘要 · 未重新核验 · CrowdStrike

Cloud ManagerManage your cloud computing services

Cloud ManagerManage your cloud computing services

历史摘要 · 未重新核验 · Akamai Security Research

See all Cloud Computing

See all Cloud Computing

历史摘要 · 未重新核验 · Akamai Security Research

智利银行在勒索软件攻击后关闭所有分行

智利银行在勒索软件攻击后关闭所有分行

历史摘要 · 未重新核验 · CNCERT

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

历史摘要 · 未重新核验 · CrowdStrike

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

历史摘要 · 未重新核验 · CrowdStrike

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

历史摘要 · 未重新核验 · CrowdStrike

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

历史摘要 · 未重新核验 · CrowdStrike

Threat Hunting & Intel

Threat Hunting & Intel

历史摘要 · 未重新核验 · CrowdStrike

Endpoint Security & XDR

Endpoint Security & XDR

历史摘要 · 未重新核验 · CrowdStrike

Engineering & Tech

Engineering & Tech

历史摘要 · 未重新核验 · CrowdStrike

EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware

EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware

历史摘要 · 未重新核验 · CrowdStrike

Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS

Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS

历史摘要 · 未重新核验 · CrowdStrike

CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting

CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting

历史摘要 · 未重新核验 · CrowdStrike