CVE-2026-76642

Unknown description...

CVE-2023-34838

CVE-2023-34838 — eScan管理控制台存储型XSS 概述 Microworld Technologies eScan管理控制台 版本 14.0.1400.2281 存在一个存储型跨站脚本XSS漏洞。拥有角色管理功能访问权限的经过身份验证的攻击者可以在新角色的 描述Description字段中注入恶意脚本。该载荷持久化保存在应用数据库中，并在随后查看受影响页面的任何用户（包括特权管理员）的浏览器中执行。 由于注入的脚本在受害者已验证会话的上下文中运行，攻击者可以利用此漏洞窃取会话Cookie、以受害者身份执行操作、将用户重定向到钓鱼页面，或在管理控制台内提升权限 。 漏洞详...

MINI-6244-22FX-P5CR

Bulletin has no description...

MINI-FJ82-797W-328W

Bulletin has no description...

MINI-2FV8-97H8-8M9M

Bulletin has no description...

MINI-6RR3-P2MX-R55W

Bulletin has no description...

MINI-5PRM-4862-WWGW

Bulletin has no description...

ECHO-65F2-4D37-B120

Bulletin has no description...

MINI-64R9-54J9-9959

Bulletin has no description...

CVE-2026-12556

creationtimestamp| type| source ---|---|--- 2026-09-02 21:28:09+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mukuv3x3nm2j 2026-09-03 10:54:31+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mumbwz6dok26 2026-09-03 14:01:09+00:00| seen|...

MINI-JCXV-XV79-FHQJ

Bulletin has no description...

MINI-X73V-4FGG-7GR9

Bulletin has no description...

MINI-66W7-948F-8VRJ

Bulletin has no description...

MINI-2WM9-828Q-G3QG

Bulletin has no description...

MINI-7JC7-X4JP-HVFP

Bulletin has no description...

CVE-2026-84378

creationtimestamp| type| source ---|---|--- 2026-09-02 19:40:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2vj7jwfapz2xn...

CVE-2026-84377

creationtimestamp| type| source ---|---|--- 2026-09-02 19:22:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ijcyerl3yj4uq...

DEBIAN-CVE-2026-84382

HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/decoders.py fully inflate each gzip, deflate, br, or zstd network chunk before iterbytes or aiterbytes yields bounded pieces to the application. A 64 KiB compressed chunk can expa...

CVE-2026-79756

creationtimestamp| type| source ---|---|--- 2026-09-02 19:02:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i42qnatmaclvb...

DEBIAN-CVE-2026-84380

HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request.prepare in src/httpx2/httpx2/models.py can add a body-derived Content-Length header to a request that already contains a caller-supplied Transfer-Encoding header because its setdefault processing checks each default head...