Vikunja: Denial of service via decompression bomb in the data import
CVE-2026-91979
### Summary Vikunja lets you export your data as a zip and import it back. The import doesn't limit how large the archiv
2026-10-11 归档
今日共收录 1127 条安全情报，包含 372 个 CVE，412 篇安全通告，以及 88 篇研究论文。
← 返回归档列表Vikunja: Any user can enumerate every team and its members by attaching arbitrary teams to a throwaway project
CVE-2026-91980
### Summary When you share a project with a team, the API lets you attach any team on the instance, including teams you
Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/resize amplification
CVE-2026-91971
### Summary The 50-megapixel decode guard exists only on the task-attachment preview path. Avatar and project-background
京ICP证080047号[京ICP备08010314号-6]
京ICP证080047号[京ICP备08010314号-6]
京网文〔2020〕6051-1195号
京网文〔2020〕6051-1195号
（总）网出证（京）字第281号
（总）网出证（京）字第281号
京公网安备 11000002002063号
京公网安备 11000002002063号
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Cloud ManagerManage your cloud computing services
Cloud ManagerManage your cloud computing services
See all Cloud Computing
See all Cloud Computing
智利银行在勒索软件攻击后关闭所有分行
智利银行在勒索软件攻击后关闭所有分行
Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019
Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019
Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019
Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019
Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018
Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018
Threat Hunting & Intel
Threat Hunting & Intel
Endpoint Security & XDR
Endpoint Security & XDR
Engineering & Tech
Engineering & Tech
EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware
EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware
Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS
Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS
CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting
CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting