rowboatlabs rowboat Composio Webhook Endpoint route.ts req.json denial of service
CVE-2026-84856
A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.j
2026-09-04 归档
今日共收录 1362 条安全情报，包含 399 个 CVE，552 篇安全通告，以及 120 篇研究论文。
← 返回归档列表UnoPim File Upload RCE via TinyMCE Image Upload Endpoint
CVE-2026-82524
UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to uplo
Windows ML CLI: CORS misconfig enables localhost RCE
CVE-2026-84452
Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prio
tsi-coop tsi-dpdp-cms client-side enforcement of server-side security
CVE-2026-84841
A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The m
tsi-coop tsi-dpdp-cms Bootstrap Setup Endpoint InterceptingFilter.java missing authentication
CVE-2026-84840
A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file Intercepti
tsi-coop tsi-dpdp-cms Admin Console/DPO Compliance Console web.xml missing authentication
CVE-2026-84839
A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionalit
HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)
CVE-2026-84382
HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/_d
PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs
CVE-2026-53706
PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevai
Hackers exploit Sangoma Switchvox flaw to deploy reverse shells
CVE-2026-9586
Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox
Critical Elementor Pro flaw exploited to take over WordPress sites
CVE-2026-32475
A recently patched critical vulnerability (CVE-2026-32475) in the Elementor Pro plugin for WordPress is being exploited
Compatibility Test Suite (CTS)
本输入来自 Android Security Bulletin，标题为“Compatibility Test Suite (CTS)”，所附链接指向 Android 官方的兼容性测试套件文档页面，而非具体的漏洞公告或补丁说明。CTS 是 A
Compatibility Definition Document (CDD)
该条目来自 Android Security Bulletin 页面，标题为“Compatibility Definition Document (CDD)”，并非针对特定安全漏洞的公告。输入内容中未提供任何正文摘要、CVE 编号、受影响产
Tools, build, and related reference
该输入并非具体的漏洞安全公告，而是 Android 安全公告网站中一篇名为“Tools, build, and related reference”的参考文档链接，指向 source.android.com/docs/setup/refer
Latest Compatibility Definition Document (CDD)
本公告为 Android 安全公告中关于『最新兼容性定义文档（CDD）』的更新条目。Android 兼容性定义文档是 Android 生态中定义设备兼容性要求的核心规范，它规定了 Android 设备必须满足的软硬件功能、接口和行为标准，以
Latest security bulletins
本输入来自 Android 官方安全公告页面，标题为“Latest security bulletins”，发布日期为 2026-09-04。该页面通常是 Android 每月安全更新补丁的汇总/入口，通常包含与框架、系统、内核、媒体框架等
update the software on your Mac
Apple 安全公告页面（编号 108382）发布了一条面向 macOS 用户的安全提示，标题为“update the software on your Mac”，即建议用户更新 Mac 上的软件。该公告发布于 2026 年 9 月 4 日
update the software on your iPhone or iPad
苹果公司发布了一则安全公告，标题为“更新你的 iPhone 或 iPad 上的软件”。该公告提醒用户及时将 iOS / iPadOS 更新到最新可用版本，以获取苹果提供的最新安全修复。公告未列出具体的 CVE 编号、受影响的系统版本或漏洞细
submit your research
该输入来自 Apple Security Releases 官方页面，但只有标题“submit your research”及一个发布链接（https://support.apple.com/en-us/102549），缺少任何具体的漏洞描
Get help with security issues
该输入为 Apple 安全发布页面上的通用技术支持标题“Get help with security issues”，并非具体的漏洞公告或安全通告。来源为 Apple 官方安全发布页面，但未包含任何漏洞详情、CVE 编号、受影响产品列表、严
Background Security Improvements
Apple 官方安全发布页于 2026 年 9 月 4 日发布了一则标题为“Background Security Improvements”的安全公告，来源为 Apple Security Releases（链接：https://supp