domain-locker

Domain Locker 您所有域名的中央枢纽 🌐domain-locker.com 目录 关于 截图 功能特性 在线演示 快速开始 Domain-Locker.com 自托管 开发 项目配置 架构 贡献 鸣谢 许可证 关于 Domain Locker 的目标是让您在一个中心位置全面掌握您的域名组合。 对于您添加的每个域名，我们会对其进行分析并获取所有相关数据。然后我们会持续监控您的域名，并在发生重要变更或即将到期时，根据您设定的偏好向您发送通知。因此，您将获得详细的域名分析、安全见解、变更历史、近期性能、估值数据等等。 有了 Domain...

Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect

The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0250...

bitbucket-iac-scan

Bitbucket Security: Infrastructure as Code Security Scanner Scans your Infrastructure as Code configuration files to ensure good security practises. Creates a security Code Insights report if issue is found. This Bitbucket Cloud supported Pipe leverages the industry leading KICS scanning tool to...

CVE-2024-54378

CVE-2024-54378 Quietly Insights = 1.2.2 - 授权缺失导致已认证（订阅者+）任意选项更新 描述 WordPress 的 Quietly Insights 插件存在未经授权修改数据的漏洞，可能因函数缺少权限检查而导致权限提升。该漏洞影响所有版本直至 1.2.2（含）。这使得已认证的攻击者（拥有订阅者及以上权限）能够更新 WordPress 站点上的任意选项。攻击者可利用此漏洞将默认注册角色更改为管理员，并启用用户注册，从而获得对漏洞站点的管理员访问权限。 详情 类型 ：插件 别名 ：quietly-insights 受影响版本 ：1.2.2 CVSS ...

advisories

关于我 Twitter：@justinsteven 博客：https://www.justinsteven.com/ 安全通告 按时间倒序列出。点击任意标题即可阅读完整通告。 Gartner Peer Insights Widget postMessage DOM XSS 披露日期：2023-02-03 Gartner Peer Insights Widget 存在一个 DOM XSS 漏洞，可通过来自任何主机名包含 "gartner.com" 的站点（例如 https://gartner.com.attacker.com）发送的 postMessage 消息触发。这影响了 Black...

Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses nanoid-3.3.12.tgz and dompurify-3.4.12.tgz which are vulnerable to CVE-2026-67213, CVE-2026-67214 and CVE-2026-75838

Summary IBM Maximo Application Suite - Cluster Performance Insights uses nanoid-3.3.12.tgz and dompurify-3.4.12.tgz which are vulnerable to CVE-2026-67213, CVE-2026-67214 and CVE-2026-75838. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Detai...

Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for September 2026.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 26.0.0-IF003, 25.0.0-IF007 and 24.0.0-IF009. These vulnerabilities have been also addressed in 24.0.1-IF009 Vulnerability Details CVEID:CVE-2026-14257 DESCRIPTION: brace-expansion through 5.0.7 is vulnerable to...

Important: Red Hat Security Advisory: Red Hat Lightspeed (formerly Insights) for Runtimes security update

An update is now available for Red Hat Lightspeed formerly Insights for Runtimes on RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat Lightspeed (formerly Insights) for Runtimes security update

An update is now available for Red Hat Lightspeed formerly Insights for Runtimes on RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: General availability of the satellite/iop-insights-engine-rhel9 container image

A new satellite/iop-insights-engine-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...

Important: Red Hat Security Advisory: General availability of the satellite/iop-insights-engine-rhel9 container image

A new satellite/iop-insights-engine-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...

CVE-2026-85173

n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that allows authenticated users with insights scopes to access workflow names and execution statistics across projects. Attackers can supply arbitrary projectId parameters to retrieve...

EUVD-2026-70408

n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that allows authenticated users with insights scopes to access workflow names and execution statistics across projects. Attackers can supply arbitrary projectId parameters to retrieve...

CVE-2026-85173 n8n before 2.36.2 Missing Authorization via Insights API

n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that allows authenticated users with insights scopes to access workflow names and execution statistics across projects. Attackers can supply arbitrary projectId parameters to retrieve...

CVE-2026-85173 n8n before 2.36.2 Missing Authorization via Insights API

n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that allows authenticated users with insights scopes to access workflow names and execution statistics across projects. Attackers can supply arbitrary projectId parameters to retrieve...

CVE-2026-85173

n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes . Authenticated users holding insights scopes can supply arbitrary projectId parameters to retrieve workflow names and execution statistics from projects they are not members of, effect...

CVE-2026-85173 n8n before 2.36.2 Missing Authorization via Insights API

n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that allows authenticated users with insights scopes to access workflow names and execution statistics across projects. Attackers can supply arbitrary projectId parameters to retrieve...

PT-2026-85005

n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that allows authenticated users with insights scopes to access workflow names and execution statistics across projects. Attackers can supply arbitrary projectId parameters to retrieve...

CVE-2026-85173: Authorization Bypass Through User-Controlled Key

n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that allows authenticated users with insights scopes to access workflow names and execution statistics across projects. Attackers can supply arbitrary projectId parameters to retrieve...

Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for August 2026.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 26.0.0-IF002 and 24.0.1-IF009. These vulnerabilities have been also addressed in 24.0.0-IF008 and 25.0.0-IF006 Vulnerability Details CVEID:CVE-2026-11806 DESCRIPTION: IBM WebSphere Application Server - Liberty...