From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through au
2026-10-31 归档
今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Malicious Claude Code extension distributed through Cursor marketplace
Categories: Threat Research Tags: advisory, Cursor
4 real? Tracking exploitation and patching of eMudhra’s weak keys
Four, just four: that’s the key to break into any unpatched connection on the Internet that is using eMudhra certificate
Dev Channel Update for ChromeOS / ChromeOS Flex
The ChromeOS Dev channel is being updated to OS version 16868.5.0 (Browser version 158.0.8127.5 ) for most ChromeOS devi
Chrome Dev for Android Update
Hi everyone! We've just released Chrome Dev 159 (159.0.8130.0) for Android. It's now available on Google Play . You can
Chrome for Android Update
Hi, everyone! We've just released Chrome 156 (156.0.8078.79) for Android. It'll become available on Google Play over the
The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incoming payment notification before marking a WooCommerce order...
CVE-2026-94361
The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incomin
The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its stored configuration, allowing users with the Contribu...
CVE-2026-110042
The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays i
pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)
CVE-2026-116775
## Summary `pageant::PageantStream` reads a 4-byte big-endian length prefix from its input stream and buffers until `le
russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)
CVE-2026-116774
## Summary A peer can advertise `maximum packet size = 0` in its channel-open message (`CHANNEL_OPEN` when attacking a
OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
CVE-2026-116677
## Summary The authenticated REST API endpoint for downloading a CA Certificate Revocation List resolves the requested
AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE
CVE-2026-96634
### Summary This vulnerability is a patch bypass that exploits catastrophic backtracking in a regular expression used t
Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
CVE-2026-69446
Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
The Tempo Operator's gateway component failed to consistently apply namespace-scoped redaction on some query API response paths when query RBAC was enabled, allowing an authenti...
CVE-2026-62147
The Tempo Operator's gateway component failed to consistently apply namespace-scoped redaction on some query API respons
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in th...
CVE-2026-111357
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, le
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, the...
CVE-2026-57193
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
A vulnerability was identified in iFlytek astron-agent up to 1.1.2. This impacts the function FileInfoV2Service.listKnowledgeByPage of the file FileInfoV2Service.java of the com...
CVE-2026-116340
A vulnerability was identified in iFlytek astron-agent up to 1.1.2. This impacts the function FileInfoV2Service.listKnow
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0, ScanInferenceFunction, ScanInferenceFunction_opset8, and ...
CVE-2026-115921
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0,
Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-85330
Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over
Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.
CVE-2026-96192
Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.