Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
CVE-2026-93616
Attackers exploited a previously unknown flaw in Check Point's Security Management Server in a handful of targeted attac
2026-09-24 归档
今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget
CVE-2026-77394
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.
OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack
CVE-2026-63132
OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's handleLogicalRecovery path
OpenBao LIST ACL bypass: a trailing-slash LIST request skips a more-specific deny rule (unported Vault v2.0.3 fix)
CVE-2026-63131
OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's vault/policy/acl.go could
OpenBao Agent Writes Secrets to Stdout
CVE-2026-77285
OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent's exec rendering mode
Moquette pattern ACL wildcard injection allows cross-tenant authorization bypass
CVE-2026-95842 · CVE-2026-95843 · CVE-2026-95844 · CVE-2026-95845 · CVE-2026-95846 · CVE-2026-95847 · CVE-2026-95848 · CVE-2026-85724
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when pattern-based ACL rules are configured, Authorizations
InvoiceShelf has cross-company user read/update IDOR that enables cross-tenant account takeover
CVE-2026-55610
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and
REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates
CVE-2026-63000
REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_api_install_package_update in redaxo/src/addons/in
REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenames
CVE-2026-63002
REDAXO is a PHP-based content management system. Prior to 5.21.2, redaxo/src/addons/mediapool/pages/sync.php inserts fil
REDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse()`
CVE-2026-63001
REDAXO is a PHP-based content management system. Prior to 5.21.2, the mediaIsInUse() handler in redaxo/src/addons/media_
SunEditor: Critical XSS vulnerability - sanitizer bypass
CVE-2026-59167
SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 2.47.11, the
jackson-databind: quadratic forward-reference completion in Collection and Map deserializers
CVE-2026-91777
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of th
A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback secret (host_config_key) is exposed to users holding only the read-le...
CVE-2026-84474
A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback secret (host
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI NetworkAcknowledgement React component (NetworkA...
CVE-2026-18872
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in th
The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchang...
CVE-2026-82843
The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.4.0 does not bind the OpenID Connect identity ass
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
多款Huawei路由器信息泄露漏洞
多款Huawei路由器信息泄露漏洞
SigNoz from v0.8.0 before v0.143.0 defaults the JWT tokenizer signing secret (tokenizer::jwt:...
CVE-2026-97055
SigNoz from v0.8.0 before v0.143.0 defaults the JWT tokenizer signing secret (tokenizer::jwt::secret, set via SIGNOZ_TOK
ReactPress has SQL injection via dynamic column names in TypeORM query builders
CVE-2026-61685
## Summary ReactPress API list endpoints build TypeORM `QueryBuilder` conditions using unsanitized HTTP query parameter