ServiceNow has remediated an authorization bypass security issue that was identified in the...
CVE-2026-86857
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This
2026-09-25 归档
今日共收录 784 条安全情报，包含 0 个 CVE，390 篇安全通告，以及 100 篇研究论文。
← 返回归档列表An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint...
CVE-2026-13248
An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerabil
mcp-fetch checks a fetch target against its SSRF guard without removing the brackets that...
CVE-2026-80347
mcp-fetch checks a fetch target against its SSRF guard without removing the brackets that surround an IPv6 literal. isSa
GROWI applies its page-viewer permission check to attachment requests only when the request...
CVE-2026-80191
GROWI applies its page-viewer permission check to attachment requests only when the request carries an authenticated use
Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)
CVE-2026-57171
**At a glance** - **Actor:** attacker who controls the -o/--output argument to trestle author {catalog,profile,ssp}-gen
Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)
CVE-2026-57170
Reporter: Cavan Loughran, Celvex Group Inc. Summary ------- The fix for CVE-2026-46439 (3.12.2 / 4.0.3) removed the rec
zbateson/mail-mime-parser has CRLF header injection via attachment filename
CVE-2026-61815
### Impact A CRLF (carriage-return / line-feed) header injection affecting any application that uses this library to b
zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME
CVE-2026-61816
### Impact An uncontrolled resource consumption / algorithmic complexity vulnerability affecting any application that p
hpack: Unbounded variable integer decoding can cause run-away computation on malformed input
CVE-2026-59980
### Impact Users of the python-hyper/hpack library, most commonly used as downstream dependency of the python-hyper/h2
Podman: Malformed Image can trick podman run into leaking host environment variables into the container
CVE-2026-57231
## Summary An container image that contains a environment variable with just a key and no value can trick podman into p
@bytebase/dbhub's read-only mode does not prevent database writes
CVE-2026-61788
### Summary Setting `readonly = true` on the `execute_sql` tool does not make the connection read-only. The connectors
xhtml-purifier has HTML attribute-injection (sanitizer bypass) that leads to XSS
CVE-2026-61784
xhtml-purifier does not HTML-entity-encode attribute values when serializing its sanitized output. In attributeString()
phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word Insertion
CVE-2026-56738
## Summary The `StopWords::add()` method in phpMyFAQ builds a SQL `INSERT` statement using `sprintf()` and inserts the
phpMyFAQ's two-factor authentication login bypasses the password factor
CVE-2026-56737
### Summary The public two-factor verification endpoint `POST /check` logs a user in based **solely** on a valid 6-digit
CyberChef: Prototype pollution in Series Chart operation
CVE-2026-57439
On 5 June 2026 CyberChef received a security vulnerability report from @hyuunnn detailing a vulnerability in the Series
京公网安备 11000002002063号
本次输入并不是一篇可用的威胁情报文章，而是一条明显的采集噪声。其标题为“京公网安备 11000002002063号”，这是中国大陆网站公安联网备案的登记编号，source_url 指向 beian.gov.cn 的备案信息查询接口（reco
（总）网出证（京）字第281号
本次输入并非威胁情报文章，而是 360 网站底部的《网络出版服务许可证》备案信息页面（网出证（京）字第281号），source_url 指向 https://www.360.cn/licence2.html，属于企业合规资质公示类静态页面，
京网文〔2020〕6051-1195号
本条记录来自 360 官方网站的资质公示页面（source_url: https://www.360.cn/licence1.html），标题「京网文〔2020〕6051-1195号」并非安全事件名称，而是北京市网络文化经营许可证（网络文化
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Cloud ManagerManage your cloud computing services
Cloud ManagerManage your cloud computing services