TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses
CVE-2026-102989
## Impact An unauthenticated attacker can craft a URL to a server function in an affected TanStack Start app. If someon
2026-10-16 归档
今日共收录 833 条安全情报，包含 0 个 CVE，434 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
CVE-2024-47575
We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
CVE-2026-0322
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
【防火墙管理】结束公测并正式计费公告
【防火墙管理】结束公测并正式计费公告
【Web 应用防火墙】安全日志服务升级通知
【Web 应用防火墙】安全日志服务升级通知
FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket...
CVE-2026-111373
FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicio
snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient:...
CVE-2026-111280
snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicio
Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam,
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication
CVE-2026-77524
## Summary A namespace admin who creates a `TriggerAuthentication` and a `ScaledObject` in their own namespace can make
Vitess vttablet /twopcz reflected XSS
CVE-2026-104252
From: xylove21 To: security@vitess.io Subject: [Security Report] Vitess vttablet /twopcz reflected XSS Date: Tue, 24 Jun
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike Announces Continuous Identity for AI Agents
Microsoft Identity Web Elevation of Privilege Vulnerability
CVE-2026-80092
Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privi
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available. The po
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
多款Huawei路由器信息泄露漏洞
多款Huawei路由器信息泄露漏洞
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
CVE-2026-110447
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online
The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, ...
CVE-2026-94135
The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClientPool`) disable SSH