PHPSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist
CVE-2026-59931
### Summary The domain whitelist introduced in PhpSpreadsheet 5.4.0 for the `WEBSERVICE()` formula function can be bypa
#advisory
共收录 23779 条相关情报。
← 返回所有主题Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)
### Impact `next-auth` (Auth.js) v5 applications that gate access by checking only for the **existence** of the `auth`
Auth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers
## Summary The exported `getToken()` helper (`next-auth/jwt` and `@auth/core/jwt`) can throw an uncaught exception when
Auth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass
## Summary The default email-address normalizer used by the email/magic-link sign-in flow validates the address **befor
Auth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them
## Summary Auth.js stores the OAuth/OIDC anti-CSRF checks (`state`, `nonce`, and the PKCE verifier) in global cookies t
【EdgeOne】CNAME 域名生成规则调整公告
【EdgeOne】CNAME 域名生成规则调整公告
【安全通告】WordPress "wp2shell" 远程代码执行漏洞风险通告（CVE-2026-63030, CVE-2026-60137）
CVE-2026-63030 · CVE-2026-60137
【安全通告】WordPress "wp2shell" 远程代码执行漏洞风险通告（CVE-2026-63030, CVE-2026-60137）
【边缘安全加速平台】关于服务等级协议更新的公告
【边缘安全加速平台】关于服务等级协议更新的公告
The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test)...
CVE-2026-21723
The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates
A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function...
CVE-2026-16653
A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function http_sendfile2 of the
boazsegev facil.io Public Folder http.c http_sendfile2 path traversal
CVE-2026-16653
A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function http_sendfile2 of the
A vulnerability was detected in publint up to 0.1.4. This impacts the function child_process.exec...
CVE-2026-16631
A vulnerability was detected in publint up to 0.1.4. This impacts the function child_process.exec of the file src/node/p
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60439
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60455
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function...
CVE-2026-16632
A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocket_on_protocol_error in the lib
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-61246
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60373
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60372
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60369
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60367
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third