10533 matches found
CVE-2026-50229
⚡ CVE-2026-50229 — Apache Tomcat 示例跨站脚本攻击利用 🔴 高级跨站脚本攻击（XSS）扫描与利用工具 —— Apache Tomcat 示例 Web 应用 📌 概述 CVE-2026-50229 是发现于 Apache Tomcat 所捆绑的 示例 Web 应用 中的一个 跨站脚本（XSS） 漏洞。该缺陷存在于 webapps/examples/jsp/num/ 目录下的 numguess.jsp 演示页面中，未经过滤的 HTTP 请求参数会在未进行 适当的清理或转义 的情况下直接反射回受害者的浏览器。 本仓库提供一个用 Python 编写的...
Prommetrix
信息： Prommetrix 是一款免费软件工具，用于从由 Prometheus 执行的 'Node Exporter' 实例中获取相关信息。 Prometheus 是一种开源的、基于指标的事件监控和告警解决方案，适用于云应用。包括 Uber、Slack、Robinhood 等在内的近 800 家云原生组织都在使用它。通过从各个端点抓取实时指标，Prometheus 可以轻松观察系统状态，此外还能观察硬件和软件指标，例如内存使用率、网络使用率以及软件特有的定义指标（例如对 Web 应用程序的失败登录尝试次数）。...
DevDojo Voyager <=1.8.0 - Cross-Site Scripting
DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed. id: CVE-2024-55416 info: name: DevDojo Voyager =1.8.0 - Cross-Site Scripting author:...
Important: edk2
Issue Overview: Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a...
CVE-2026-29114
CVE-2026-29114 — Certificado raíz CA del dispositivo Dahua expuesto Tipo de aviso: Divulgación de seguridad coordinada con el proveedor ID de CVE: CVE-2026-29114 Proveedor: Dahua Technology Publicado: 2026-06-10T05:44:50 UTC Última modificación: 2026-06-10T05:44:50 UTC Fuente: Centro de confianza...
DEBIAN-CVE-2026-87631
Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-87624
UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87620
Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-87602
Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-87597
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...
DEBIAN-CVE-2026-87592
Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87597
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...
DEBIAN-CVE-2026-87561
Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
CVE-2026-87561
Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
CVE-2026-87545
Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-87545
Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87544
Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-87519
Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...