181629 matches found
CVE-2026-92038
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
CVE-2026-92038 Mitigation bypass in the Remote Settings Client component
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
CVE-2026-92038
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
CVE-2026-92030
Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...
CVE-2026-92030 Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component
Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...
EUVD-2026-78493
Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...
CVE-2026-92030
Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...
CVE-2026-92019
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...
EUVD-2026-78482
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...
CVE-2026-92019 Mitigation bypass in the Remote Settings Client component
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...
CVE-2026-92019
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...
CVE-2020-14882-WebLogic-Analysis
漏洞研究：在 Oracle WebLogic Server 中利用 CVE-2020-14882 与 CVE-2020-14883 漏洞链 该仓库包含一份技术报告（Write-up）和概念验证（Proof of Concept，PoC），用于演示 Oracle WebLogic Server 管理控制台组件中认证绕过（Authentication Bypass）与远程代码执行（RCE）漏洞链的利用。 🛑 警告与免责声明： 本材料仅用于教育目的及合法的安全审计（渗透测试）。未经所有者事先书面同意，针对系统使用所述技术将依法追究责任。 🏗 研究架构与技术栈 目标： 部署了 Oracle...
CVE-2026-41651
CVE-2026-41651 root@kitploit: CVSS 3.x : 7.8 HIGH CWE : CWE-367 Time-of-Check Time-of-Use Fix : PackageKit 1.3.5+ Affects : PackageKit 1.0.2 – 1.3.4 Local privilege escalation via TOCTOU race condition in PackageKit's D-Bus transaction handler. Any unprivileged local user can install arbitrary...
CVE-2026-24207
CVE-2026-24207 — NVIDIA Triton SageMaker 认证绕过导致未授权远程代码执行 未认证攻击者能够通过 SageMaker 和 Vertex AI 的 HTTP 端口访问 NVIDIA Triton 推理服务器的模型管理层，绕过了运维人员的 --http-restricted-api 配置。 结合 SageMaker MME LOAD 原语和 Python 后端模型，当攻击者能够将模型文件放置在 Triton 可读的文件系统路径上时，可以实现预认证远程代码执行 ，以 Triton 进程用户的身份执行。 CVE： CVE-2026-24207（SageMak...
CVE-2021-29441
CVE-2021-29441 - Nacos 身份验证绕过 CVE-2021-29441 是一个影响 Nacos 1.4.1 之前版本的严重身份验证绕过漏洞。Nacos 是云原生环境中广泛使用的动态服务发现、配置管理和服务治理平台。该漏洞允许未认证的攻击者绕过身份验证控制，并对易受攻击的 Nacos 服务器执行管理操作。 漏洞详情...
CVE-2026-91997 evolution-api through 2.3.7 Prometheus Metrics IP Allowlist Bypass
evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /metrics endpoint. Attackers can bypass IP whitelist restrictions to access sensitive metrics disclosing server version,...
CVE-2026-91995 pig before 4.1.0 Unverified Password Change via /register/password
pig before 4.1.0 contains an authentication bypass vulnerability in the /register/password endpoint where password verification results are discarded, allowing any value as the current password. Remote attackers can submit a username with an incorrect current password to overwrite any account...
CVE-2026-91993 Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list
Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, allowing authenticated users to access repositories from other workspaces. Attackers can submit repository identifiers from different workspaces to enumerate repository...
CVE-2026-49869
Kestra CVE-2026-49869 / CVE-2026-53576 スキャナー Kestraインスタンスをスキャンし、endsWith"/configs" による認証フィルターのバイパスをチェックします。Kestraの AuthenticationFilter.java は、正確なパス /api/v1/configs と比較する代わりに request.getPath.endsWith"/configs" でチェックを行うため、呼び出し側が選択可能なパスセグメント（名前空間、フローID）を介してアドレス指定されるリソースに対し、/configs...