Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
2026-10-08 归档
今日共收录 832 条安全情报，包含 0 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
Huawei Secoway USG firewall weak password
Huawei Secoway USG firewall weak password
Yokogawa YFGW410 gateway
Yokogawa YFGW410 gateway
The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is...
CVE-2026-94258
The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selec
An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST...
CVE-2026-87670
An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The intern
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure...
CVE-2026-76280
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.1
FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
CVE-2026-105697
### Summary Before **Langflow 1.10.3**, the MCP stdio transport launched whatever `command` / `args` a user put in an M
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike Announces Continuous Identity for AI Agents
Evolution of Web3 in Cloud Supply Chain Attacks
Unit 42 details how threat actors leverage Web3 infrastructure and open-source supply chain attacks to breach enterprise
Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route
CVE-2026-66859
Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route
Long Term Support Channel Update for ChromeOS
CVE-2026-19173 · CVE-2026-91736 · CVE-2026-17657 · CVE-2026-91708 · CVE-2026-19137 · CVE-2026-19170 · CVE-2026-87514 · CVE-2026-85052 · CVE-2026-87499 · CVE-2026-103630 · CVE-2026-79174 · CVE-2026-91749 · CVE-2026-79195 · CVE-2026-95339 · CVE-2026-78954 · CVE-2026-85051 · CVE-2026-91721 · CVE-2026-84325 · CVE-2026-95310 · CVE-2026-95356 · CVE-2026-91716 · CVE-2026-84349 · CVE-2026-95313 · CVE-2026-102324 · CVE-2026-95372 · CVE-2026-85043 · CVE-2026-79078 · CVE-2026-95351 · CVE-2026-85053 · CVE-2026-79219 · CVE-2026-91724 · CVE-2026-91722 · CVE-2026-79218 · CVE-2026-84357 · CVE-2026-79274 · CVE-2026-79201 · CVE-2026-79187 · CVE-2026-87647 · CVE-2026-78952 · CVE-2026-87628 · CVE-2026-17666 · CVE-2026-84324 · CVE-2026-91737
A new LTC version 150.0.7871.256 (Platform Version: 16700.66.0), is being rolled out for most ChromeOS devices. This ve
从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）
CVE-2026-71486
从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
多款Huawei路由器信息泄露漏洞
多款Huawei路由器信息泄露漏洞
A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol...
CVE-2026-87665
A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabr
Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints
CVE-2026-105698
### Summary Before **Langflow 1.10.1**, two deprecated but still-routed endpoints in the chat API did not check that th
Next.js has cache poisoning of SSG and ISR pages in self-hosted applications
CVE-2026-94543
Self-hosted Next.js applications that use the Pages Router with statically generated (SSG) or incrementally regenerated