Vulnerability-Disclosure-Policy

Política de divulgación de vulnerabilidades Creemos que la divulgación de vulnerabilidades es una calle de doble sentido. Tanto los proveedores como los investigadores deben participar en la divulgación coordinada de vulnerabilidades. Cuando Enable Security descubre vulnerabilidades a través de s...

CVE-2026-29116

CVE-2026-29116 — 大华未认证远程拒绝服务 公告类型： 厂商协调安全披露 CVE ID： CVE-2026-29116 厂商： 大华技术 发布时间： 2026-06-10T06:16:34 UTC 最后修改： 2026-06-10T06:16:34 UTC 来源： 大华产品安全事件 PSI 信任中心 目录 执行摘要 概览 漏洞时间线 描述 技术分析 受影响产品 CVSS 评分 漏洞评分详情 CWE 分类 攻击前提 利用场景 影响评估 检测与入侵指标 缓解与修复 临时解决方案 厂商响应 参考资料 免责声明 文档修订历史 执行摘要...

security-research

security-research Proof-of-concept code and technical write-ups for vulnerabilities I discovered and reported through coordinated disclosure. Every entry here is already public: the vendor advisory is published and a fixed release is available. Nothing under embargo or in draft is included. The...

CVE-Disclosures

CVE-Disclosures...

GHSA-7GWP-5PFP-969J

creationtimestamp| type| source ---|---|--- 2026-08-18 00:32:32+00:00| seen| https://gist.github.com/alon710/9d43dd3bb8cad3aff005a6b8be53e64d 2026-08-21 09:24:49+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mtlgunnc4g2v...

router-vulnerability-research

router-vulnerability...

JLSEC-2026-800 Slow DNS lookups can stall garbage collection process-wide

Reseau 1.0.0 through 1.3.1 perform the blocking system getaddrinfo operation from Julia-adopted resolver threads without marking the foreign call as garbage-collector safe. An attacker who can cause an application to resolve a slow hostname can delay stop-the-world garbage collection for the enti...

CVE

Security Advisories & CVEs — Lyris Vale Vulnerabilities I've...

security-research

security-research Proof-of-concept code and technical write-u...

AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks

Two researchers have found six security flaws in AirDrop and Quick Share , the wireless features that beam files between nearby devices with no cables or shared network. An attacker within wireless range, with just a laptop and no prior connection, can crash the sharing service on a Mac or iPhone...

Patch Tuesday - June 2026

Microsoft is publishing 200 vulnerabilities on June 2026 Patch Tuesday. Microsoft is not aware of exploitation in the wild for any of these vulnerabilities, and is aware of public disclosure for three. This is similar to last month’s Patch Tuesday, however several of last month’s vulnerabilities...

CVE-2026-4387

StrongDM Desktop Application before 23.74.0 Desktop Client before 53.77.0 on Microsoft Windows stores authentication state, including a JSON Web Token and asymmetric key material, in cleartext in a per-user state file located at C:\Users\.sdm\state.kv. The file is protected only by default...

CVE-2026-4387 Unencrypted storage of authentication state in StrongDM Desktop Application state.kv file

StrongDM Desktop Application before 23.74.0 Desktop Client before 53.77.0 on Microsoft Windows stores authentication state, including a JSON Web Token and asymmetric key material, in cleartext in a per-user state file located at C:\Users\.sdm\state.kv. The file is protected only by default...

Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal

Microsoft has come out strongly in favor of Coordinated Vulnerability Disclosure CVD, urging the research community to share their findings and give affected vendors an opportunity to better understand the impact and address them before they are publicly disclosed. The development comes after a...

AI Playground Software Advisory

Summary: A potential security vulnerability for some AI Playground software maintained by Intel may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-36515 Description: Uncontrolled search path for...

security-advisories

Security Advisories Public write-ups and PoCs for CVEs I've d...

authorized-pentest

authorized-pentest A runbook-style Claude Code skill for runn...

Security-Advisories

Security Advisories — trexnegr0 Public disclosure repository...

Intent redirection vulnerability in third-party SDK exposed millions of Android wallets to potential risk

In this article 1. Technical details 2. Disclosure timeline 3. Mitigation and protection guidance 4. References 5. Learn more During routine security research, we identified a severe intent redirection vulnerability in a widely used third-party Android SDK called EngageSDK. This flaw allows apps ...

Intent redirection vulnerability in third-party SDK exposed millions of Android wallets to potential risk

In this article 1. Technical details 2. Disclosure timeline 3. Mitigation and protection guidance 4. References 5. Learn more During routine security research, we identified a severe intent redirection vulnerability in a widely used third-party Android SDK called EngageSDK. This flaw allows apps ...