Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover
CVE-2026-59151
## SAML Tenant Binding Enables Cross-Tenant Account Takeover ### Summary Prowler's SAML authentication flow trusted th
2026-09-12 归档
今日共收录 1637 条安全情报，包含 801 个 CVE，449 篇安全通告，以及 100 篇研究论文。
← 返回归档列表rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass
CVE-2026-88018
### Summary `rclone serve s3`'s handler chain, when `--auth-proxy` is configured, is (outermost first): `authPairMiddlew
Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
CVE-2026-20079
据 The Hacker News 报道，Cisco 披露其 Secure Firewall Management Center（FMC）存在两个已修复的漏洞，并已被至少三个不同的威胁集群用于实际攻击，其中既有与勒索软件活动相关的团伙，也有
CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)
CVE-2026-0250
Palo Alto Networks 发布安全公告，披露 GlobalProtect App（GlobalProtect 终端客户端）中存在一个缓冲区溢出漏洞，编号 CVE-2026-0250，厂商自评严重级别为 MEDIUM。Global
“Eye” spy: Cyclops Blink returns with extended capabilities
Sophos 威胁研究团队发布分析博客，指出模块化恶意软件平台 Cyclops Blink 以"升级版"形态回归，其能力较此前版本有所扩展，本轮观察到的攻击目标为 Cisco Firewall Management Center（FMC，防
Ivanti Endpoint Manager Mobile代码注入漏洞
知道创宇 / Seebug 漏洞库收录了一条关于 Ivanti Endpoint Manager Mobile（EPMM，原 MobileIron Core）的代码注入类漏洞条目。Ivanti EPMM 是企业级移动设备管理（MDM/EMM
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Requests from the reverse proxy to the identity-provider service for token discovery,...
CVE-2026-90452
Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exch
When a particular authentication mode is configured, the reverse proxy forwards requests for a...
CVE-2026-90449
When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party admin
In the Linux kernel, the following vulnerability has been resolved: btrfs: write-protect folios...
CVE-2026-89772
In the Linux kernel, the following vulnerability has been resolved: btrfs: write-protect folios during data writeback
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
CVE-2026-88006
## Summary Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the O
Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging
CVE-2026-88009
## Summary Traefik accepts an HTTP/1.x request whose request-target is in rootless / opaque form (for example `GET http
Surfshark VPN says hackers breached internal testing, proxy servers
BleepingComputer 报道，VPN 服务商 Surfshark 公开披露：由于其一台内部测试服务器存在配置错误（misconfiguration），该服务器被直接暴露在互联网上，攻击者借此获得了访问权限。文章标题进一步指出，攻击
MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)
CVE-2026-59971
## Summary In SSE/HTTP transport mode, `mysql_mcp_server` constructs `SseServerTransport` without passing `security_set
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Chromium CVE-2026-87491: Out of bounds write in V8
CVE-2026-87491
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming
CVE-2026-76023
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium CVE-2026-76022: Buffer overflow in Network
CVE-2026-76022
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium CVE-2026-76021: Use after free in DOM
CVE-2026-76021
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.