CVE-2026-92057

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92073 Privilege escalation in the Enterprise Policies component

Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92073

Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92073

Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92073 Privilege escalation in the Enterprise Policies component

Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-92057

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

EUVD-2026-78520

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-92057 Mitigation bypass in the Enterprise Policies component

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92057

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2024-36991

CVE 2024-36991 A path-traversal vulnerability that allows an attacker to read files from the system. Technical Summary CVE : 2024-36991 Path Traversal Affected Systems : Splunk Enterprise 9.2.1 , 9.1.4 , 9.0.9 Legal Disclaimer This tool is provided for authorized security assessments only...

patch-CVE-2026-28001

补丁：CVE-2026-28001 漏洞详情 CVE ：CVE-2026-28001 产品 ：Splunk Enterprise 描述 ：SPL 解析中的远程代码执行 严重级别 ：严重 补丁状态：已部署 字段| 值 ---|--- 补丁日期| 2026-07-22 状态| 已部署 部署至| 生产环境 验证人员| SecOps 团队 参考链接 NVD CISA KEV...

CVE-2026-20253

Splunk Enterprise — CVE-2026-20253 训练实验环境 Splunk Enterprise 10.2.3 · PostgreSQL 恢复侧车 · CWE-306（关键功能缺少身份验证） 一个经授权的、自包含的复现环境，模拟 了真实安全公告的内容， 用于防御性安全教育。它不包含 Splunk 的专有代码。 本仓库是一个 Vulhub/DVWA 风格的安全训练实验环境。它搭建了一个 Splunk Enterprise 10.2.3 的忠实模型，并复现了 CVE-2026-20253 背后的 已记录行为：自带的 PostgreSQL 恢复侧车 暴露了特权文件写入和...

watchTowr-vs-Splunk-CVE-2026-20253

CVE-2026-20253 Splunk 预认证 RCE Splunk 预认证 RCE 1day 检测工件生成器工具 实际检测 检测工件生成器尝试访问 PostgreSQL Sidecar 服务的 /v1/postgres/recovery/backup 端点，以验证其是否可访问： 400 响应 - 可能存在漏洞 401 响应 - 可能不存在漏洞 其他响应 - 未安装 PostgreSQL Sidecar 服务（不存在漏洞），或某些因素影响了响应，请手动验证 脚本已在以下环境测试： Linux 上的 Splunk Enterprise 10.2.3（存在漏洞） Linux 上的...

Mozilla Firefox ESR < 153.3

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 153.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-93 advisory. - Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156 a...

PT-2026-91993

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

PT-2026-92009

Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-20253

🚨 CVE-2026-20253 - Splunk Enterprise 未认证文件创建高危漏洞 未认证的任意文件创建与截断漏洞，影响Splunk Enterprise与Splunk Cloud Platform。 📖 执行摘要 CVE-2026-20253 是 Splunk Enterprise 与 Splunk Cloud Platform 中的一个高危漏洞，允许未认证的远程攻击者通过暴露的PostgreSQL sidecar服务端点创建或截断任意文件。 由于受影响的功能缺乏认证控制，攻击者可在无有效凭证的情况下执行文件操作。 成功利用可能导致： 任意文件创建 文件截断 数据破坏...

CVE-2026-17133

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-17156

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization...

EUVD-2026-77786

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...