A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identi...

CVE-2026-103314

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoi

来源摘录 · NVD

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient valid...

CVE-2026-77176

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection,

来源摘录 · NVD

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk req...

CVE-2026-93834

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker

来源摘录 · NVD

Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ra...

CVE-2026-34892

Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Exploiting Incorrectly Config

来源摘录 · NVD

A flaw was found in Hive, a component of Multicluster Engine (MCE) and Advanced Cluster Management (ACM). This vulnerability causes VCenter credentials to be exposed in the Clus...

CVE-2025-2241

A flaw was found in Hive, a component of Multicluster Engine (MCE) and Advanced Cluster Management (ACM). This vulnerabi

来源摘录 · NVD

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.8.14.3. This is ...

CVE-2026-109386

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypass

来源摘录 · NVD / GitHub Advisory

The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 via the user profile Webs...

CVE-2026-107765

The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versi

来源摘录 · NVD / GitHub Advisory

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'billing_address.first_name / last_name / company, cus...

CVE-2026-107750

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t

来源摘录 · NVD / GitHub Advisory

The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPress is vulnerable to Stored Cross-Site...

CVE-2026-107653

The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payment

来源摘录 · NVD / GitHub Advisory

Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)

Wireshark Release Candidate 5.0.0 was published: soon we can expect a new major version of Wireshark.

来源摘录 · SANS ISC

YARA-X 1.22.1 Release, (Sat, Oct 31st)

YARA-X&#;x26;#;39;s 1.22.1 is a bugfix version, it brings 2 bugfixes.

来源摘录 · SANS ISC

YARA-X 1.22.0 Release, (Sun, Oct 25th)

YARA-X&#;x26;#;39;s 1.22.0 release brings 11 improvements and 9 bugfixes.

来源摘录 · SANS ISC

A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing t

来源摘录 · The Hacker News

Syrian Hacker Gets Prison Time in US After Over a Decade on the Run

A US court sentenced Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad attacks on media, businesses, and governme

来源摘录 · SecurityWeek

Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetrati

来源摘录 · The Hacker News

TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them

TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connecte

来源摘录 · The Hacker News

[原创]利用 API Set 实现无DLL注入的API重定向与劫持

[原创]利用 API Set 实现无DLL注入的API重定向与劫持

来源摘录 · 看雪

[原创] token花不完，让AI写了一个apk重打包工具

[原创] token花不完，让AI写了一个apk重打包工具

来源摘录 · 看雪

[原创]MFC 程序按钮事件快速定位实战教程

[原创]MFC 程序按钮事件快速定位实战教程

来源摘录 · 看雪

[原创]远程桌面钓鱼的故事

[原创]远程桌面钓鱼的故事

来源摘录 · 看雪