ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
CVE-2026-35273
勒索与数据窃取敲诈团伙 ShinyHunters 被曝正在针对 Oracle PeopleSoft 应用发起新一轮攻击。据 BleepingComputer 报道，该团伙使用了一种基于 URL 编码的 WAF 绕过技巧，使原本用于缓解 CV
2026-09-28 归档
今日共收录 884 条安全情报，包含 147 个 CVE，402 篇安全通告，以及 73 篇研究论文。
← 返回归档列表Sylius 2.x before 2.1.16 and 2.2.9 Payment Amount Overwrite
CVE-2026-100872
Sylius versions before 2.1.16 and 2.2.9 fail to validate payment amounts during cart recalculation, allowing unauthentic
Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 JWT Audience Confusion Allows Admin API Authentication
CVE-2026-100871
Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fail to include firewall identification in JWT token
Sylius 2.x before 2.1.16 and 2.2.9 Arbitrary Payment Action via Shop API
CVE-2026-100869
Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing cust
CRL check skipped when OCSP enabled and certificate has no OCSP URL
CVE-2026-94417
When an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or certificate manager, wolfSSL ski
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
Huawei Secoway USG firewall weak password
Huawei Secoway USG firewall weak password
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway....
CVE-2026-88777
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects AD
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway....
CVE-2026-88776
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC
Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue...
CVE-2026-88775
Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. ...
CVE-2026-88771
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: b
Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix...
CVE-2026-88778
Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This i
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC:...
CVE-2026-88774
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 1
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC:...
CVE-2026-88772
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 1
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in...
CVE-2026-88773
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC a
Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fail to include firewall...
CVE-2026-100871
Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fail to include firewall identification in JWT token
Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API...
CVE-2026-100869
Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing cust
Sylius versions before 2.1.16 and 2.2.9 fail to validate payment amounts during cart...
CVE-2026-100872
Sylius versions before 2.1.16 and 2.2.9 fail to validate payment amounts during cart recalculation, allowing unauthentic
When an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or...
CVE-2026-94417
When an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or certificate manager, wolfSSL ski
从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）
CVE-2026-71486
先知社区于 2026-09-28 发布一篇技术分析文章，标题为《从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）》，聚焦开源大模型推理与服务框架 vLLM 中编号为 CVE-2026-71486 的安全问题。从标题可