Firewall for AI
Firewall for AI
2026-09-16 归档
今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Cisco patches Secure Email Gateway zero-day exploited in attacks
Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been expl
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers
China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE
A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in
240,000 Hit by Data Breach at Japan’s Digital Agency
Hackers exploited a vulnerability in a VPN product to steal the personal information of roughly 240,000 people. The post
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function...
CVE-2026-92217
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file
An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's...
CVE-2026-15639
An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScrip
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller...
CVE-2026-78225
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS
A hardcoded cryptographic client authentication key vulnerability exists in the robot testing...
CVE-2026-81855
A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wär
Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute...
CVE-2026-10144
Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands b
On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay...
CVE-2026-73437
On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenti
The mySCADA myPRO Manager command API does not properly enforce authentication for privileged...
CVE-2026-73807
The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthentica
Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without...
CVE-2026-91939
Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes restriction, allowing
Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...
CVE-2026-91749
Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbit
Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a...
CVE-2026-91742
Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging
Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a...
CVE-2026-91726
Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memo
Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...
CVE-2026-91728
Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code insid
Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a...
CVE-2026-91717
Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtai
@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery
CVE-2026-61559
# Server-Side Request Forgery via X-GitLab-API-URL Header Allows Credential Theft ## Affected - **Repository:** `zerei
Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE
CVE-2026-88975
### Summary An unauthenticated peer can make Ember's HTTP/2 read loop hold 16 MiB of a single frame in memory on a conne