Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
2026-10-09 归档
今日共收录 747 条安全情报，包含 0 个 CVE，359 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability...
CVE-2026-107406
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. Ne
Hazelcast allows arbitrary member memory access by low-privileged client
CVE-2026-107726
### Impact A flaw has been found in Hazelcast Enterprise Edition and Community Edition, which would allow a low-privile
Indico: Incomplete Server-Side Request Forgery (SSRF) check
CVE-2026-107394
### Impact Indico makes outgoing requests to user-provides URLs in various places. This is mostly intentional and part o
AdonisJS: Unencoded route parameters can produce open redirects
CVE-2026-107718
Route parameters are inserted into generated URLs without URI encoding. When an application passes untrusted input to a
PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface
CVE-2026-61427
## Summary PraisonAI's MCP HTTP-stream server authenticates requests only when an API key is configured; the CLI defaul
Alert for CVE-2025-61884
CVE-2025-61884
Alert for CVE-2025-61884
FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike Announces Continuous Identity for AI Agents
Evolution of Web3 in Cloud Supply Chain Attacks
Unit 42 details how threat actors leverage Web3 infrastructure and open-source supply chain attacks to breach enterprise
从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）
CVE-2026-71486
从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend
CVE-2026-60085
Summary SecurityPolicy in praisonaiagents/sandbox/config.py is a documented configuration data class with fields for all
PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF
CVE-2026-60091
## Summary PraisonAI's Async Jobs API enables its API-key middleware **only when `PRAISONAI_JOBS_API_KEY` is set**, so
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2