Laravel TokenGuard authentication bypass through non-string API credentials
CVE-2026-114509
Laravel's built-in TokenGuard, **when configured with a standard token-based API guard**, may be bypassed to authenticat
2026-10-24 归档
今日共收录 814 条安全情报，包含 0 个 CVE，421 篇安全通告，以及 100 篇研究论文。
← 返回归档列表chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
CVE-2026-114437
### Summary `ClientIPFromXFF` skips any `X-Forwarded-For` entry in a configured trusted CIDR but never verifies that th
ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in...
CVE-2026-115863
ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/cl
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
Background Security Improvements for iOS, iPadOS, and macOS
iOS 16.7.15 and iPadOS 16.7.15
iOS 16.7.15 and iPadOS 16.7.15
iOS 15.8.7 and iPadOS 15.8.7
iOS 15.8.7 and iPadOS 15.8.7
iOS 26.3 and iPadOS 26.3
iOS 26.3 and iPadOS 26.3
iOS 18.7.5 and iPadOS 18.7.5
iOS 18.7.5 and iPadOS 18.7.5
Android Code Search
Android Code Search
Secure an Android device
Secure an Android device
iOS 26.5 and iPadOS 26.5
iOS 26.5 and iPadOS 26.5
iOS 18.7.9 and iPadOS 18.7.9
iOS 18.7.9 and iPadOS 18.7.9
iOS 16.7.16 and iPadOS 16.7.16
iOS 16.7.16 and iPadOS 16.7.16