Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability
CVE-2026-62901
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst
#advisory
共收录 23530 条相关情报。
← 返回所有主题DSPy 3.3.0b1 Local File Read via Image/Audio Output Field Parsing
CVE-2026-72742
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attacke
Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability
CVE-2026-62899
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst
electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename
CVE-2026-73223
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm al
Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability
CVE-2026-62898
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr
MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust
CVE-2026-69102
MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in application-maxkey.proper
CVAT: Denial of service with regards to automatic annotation
CVE-2026-73219
CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user
coturn allocates a full per-peer SSL/session before verifying the DTLS cookie, enabling source-spoofing/botnet state-exhaustion DoS
CVE-2026-73214
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtls_server_input_handler() and cr
turso-cli persists Turso platform JWT with world-readable (0o644) file permissions
CVE-2026-48790
Turso CLI is the command line interface (CLI) to the open-source database Turso. Versions prior to 1.0.26 persist the us
SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle
CVE-2026-73080
### Impact `VolumeServer.FetchAndWriteNeedle` fetches a caller-supplied remote endpoint and writes the response into a n
【安全通告】Linux Kernel SCTP "SCTPhantom" 本地权限提升漏洞风险通告（CVE-2026-64564）
CVE-2026-64564
【安全通告】Linux Kernel SCTP "SCTPhantom" 本地权限提升漏洞风险通告（CVE-2026-64564）
【腾讯云认证】腾讯云智能体开发平台AI应用工程师认证升级公告
【腾讯云认证】腾讯云智能体开发平台AI应用工程师认证升级公告
【TDSQL-C MySQL 版】子账号退费 Serverless 资源包需主账号授权
【TDSQL-C MySQL 版】子账号退费 Serverless 资源包需主账号授权
【TDSQL-C MySQL 版】创建账号接口异步化升级公告
【TDSQL-C MySQL 版】创建账号接口异步化升级公告
In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated...
CVE-2025-30238
In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to e
The affected TP-Link Aginet devices contain a flaw in the web management interface where...
CVE-2025-30237
The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not c
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware...
CVE-2025-30239
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive co
The affected TP-Link Aginet devices do not properly validate symbolic links created on external...
CVE-2025-30240
The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By
Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize...
CVE-2025-30241
Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input pro
Cross-Site Request Forgery weaknesses in the Administrative Console of PingFederate versions...
CVE-2025-32736
Cross-Site Request Forgery weaknesses in the Administrative Console of PingFederate versions before version 13.1 may all