ConnectWise ScreenConnect 安全漏洞

ConnectWise ScreenConnect is a self-hosted remote desktop software application developed by ConnectWise. Versions of ConnectWise ScreenConnect prior to version 26.2 contained a security vulnerability. This vulnerability stemmed from the lack of input validation for the token expiration duration...

Debusine 安全漏洞

Debusine is a software supply chain management platform for the Debian community, focused on package building, testing, analysis, and distribution. There is a security vulnerability in Debusine, which stems from the lack of permission checks performed on endpoints related to the creation and...

Splunk Cloud Platform和Splunk Enterprise 访问控制错误漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of the American company Splunk. Splunk Cloud Platform is a powerful service for data collection, processing, and analysis. Splunk Enterprise is a suite of software for data collection and analysis. Vulnerabilities in access control...

PT-2026-48549

Name of the Vulnerable Software and Affected Versions Sharp versions 9.0.0 through 9.22.2 Description Sharp is a content management framework built for Laravel as a package. The 'create' and 'store' endpoints of the Quick Creation Command feature fail to enforce authorization checks. This allows ...

CVE-2026-34707

creationtimestamp| type| source ---|---|--- 2026-06-09 23:12:20+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnvd35nofr23...

CVE-2026-47930

creationtimestamp| type| source ---|---|--- 2026-06-09 22:27:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvaketsgc2v 2026-06-10 09:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwdxh5ab625 2026-06-15 19:37:06+00:00| seen|...

CVE-2026-47931

creationtimestamp| type| source ---|---|--- 2026-06-09 22:22:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvabg7ugb23 2026-06-09 23:01:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvci7wcng2d 2026-06-15 17:37:06+00:00| seen|...

CVE-2026-47932

creationtimestamp| type| source ---|---|--- 2026-06-09 22:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnv7gj4vo52e 2026-06-10 07:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnw5b3mdyo27 2026-06-15 17:07:07+00:00| seen|...

PhoenixStorybook: Unbounded atom creation from LiveView event params (atom-table DoS)

Summary An attacker who can deliver psb-assign, psb-toggle, psb-set-theme, upper-tab-navigation, lower-tab-navigation, playground-change, or playground-toggle LiveView events to a mounted Phoenix Storybook playground can flood the BEAM atom table with attacker-controlled strings, permanently...

CVE-2026-47106

creationtimestamp| type| source ---|---|--- 2026-06-09 21:56:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnv6u2vvte23...

Malicious code in db-xorma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1428486c71a3cd7d89ea90a17631bb5dc0fee7e11a6cbb4d8029a8b25268c7d2 db-xorma advertises itself as a reactive in-memory database library. When a consumer creates any Model instance the documented entry point, the...

GHSA-67V7-3G49-MXH2

creationtimestamp| type| source ---|---|--- 2026-06-09 19:20:17+00:00| seen| https://gist.github.com/pseudo7777/6fb3ec2f8f5b760f09161e11ad328b2f...

EUVD-2026-35441

An Authentication Bypass vulnerability CWE-288 in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access...

CVE-2026-49955

creationtimestamp| type| source ---|---|--- 2026-06-09 17:35:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuqb4o7py2v...

CVE-2026-24181

creationtimestamp| type| source ---|---|--- 2026-06-09 17:16:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnup5oegg42v 2026-06-09 18:16:15+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116721479487661795...

CVE-2026-24180

creationtimestamp| type| source ---|---|--- 2026-06-09 17:10:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuotjfmxk2p 2026-06-09 18:14:05+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116721479487661795...

CVE-2026-42570

creationtimestamp| type| source ---|---|--- 2026-06-09 17:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuonoucrj2l...

EUVD-2026-35545

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-34181

creationtimestamp| type| source ---|---|--- 2026-06-09 16:53:35+00:00| seen| https://mstdn.social/users/jschauma/statuses/116721189556088584 2026-06-10 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/openssl-multiple-vulnerabilities20260611 2026-06-23 12:01:01+00:00| seen|...

CVE-2026-45463

creationtimestamp| type| source ---|---|--- 2026-06-09 16:04:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182 2026-06-09 16:12:18+00:00| seen| https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review 2026-07-15 18:07:06+00:00| seen|...