3629 matches found
papers
่ฎบๆ ไธไธชไพฟๆท็ๅ้๏ผ้ไธญๆถๅฝไบๆๅ ฌๅผๅ่กจ็่ฎบๆใ Symantec Altiris Deployment Solution ๆ้ๆๅๆผๆด 13048 Exploit-db ๅบ็็ฉ๏ผ https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf March Networks DVR-CCTV 3204 ๅฎๅ จ้ๆฃๆฆ่ฟฐ 13060 Exploit-db ๅบ็็ฉ๏ผ...
CVE-2019-0859-1day-Exploit
CVE-2019-0859-1day-ใจใฏในใใญใคใ CVE-2019-0859 1dayใจใฏในใใญใคใ ๅฏพ่ฑกOS : Windows 7 x64 ServicePack1 7601 ใใฎใจใฏในใใญใคใใฏใ2019ๅนด3ๆใฎใปใญใฅใชใใฃๆดๆฐใใญใฐใฉใ ใ้ฉ็จใใใ็ฐๅขใๅฟ ่ฆใงใใไปฅๅใฎๆดๆฐใใญใฐใฉใ ใงใฏ็พๅจใใงใใฏใใใฆใใพใใใ ใจใฏในใใญใคใใฎไฟก้ ผๆงใฏ100%ใงใฏใใใพใใใๆใ ใจใฏในใใญใคใใๅฎๅ จใซๅไฝใใชใใใจใใใใพใใใใฎๅ ดๅใฏใๅๅบฆ่ฉฆใใฆใใ ใใใ...
CVE-2023-25690-POC
CVE 2023 25690 - ๆฆๅฟต้ช่ฏ ๅๅธๆฅๆ๏ผ2023ๅนด3ๆ7ๆฅ ๅบ็ก่ฏๅ| ๆบๅฏๆง| ๅฎๆดๆงๅฝฑๅ| ๅฏ็จๆงๅฝฑๅ ---|---|---|--- 9.8| ้ซ| ้ซ| ้ซ ็ฎๅฝ ๅ ฌๅๆ่ฟฐ ๆๅๆปๅป็ Apache ้ ็ฝฎ่ฏฆ่งฃ ๆฐๆฎๆต ๅฎ้ช็ฏๅขๆญๅปบ HTTP ่ฏทๆฑๆๅๅฏผ่ดๅ็ซฏๆๅกไธ็ HTTP ่ฏทๆฑ่ตฐ็ง ่ฏๅซ CRLF ๆณจๅ ฅ ้่ฟๅคด้จๆณจๅ ฅๅฎ็ฐๅ ้จ HTTP ่ฏทๆฑ่ตฐ็ง ๅฝฑๅ ๅ ฌๅๆ่ฟฐ Apache HTTP Server ็ๆฌ 2.4.0 ่ณ 2.4.55 ไธ็ๆไบ modproxy ้ ็ฝฎ ๅ ่ฎธๅ่ตท HTTP ่ฏทๆฑ่ตฐ็งๆปๅป ใๅฝ modproxy ไธๆ็งๅฝขๅผ็ RewriteRule ...
CVE-2020-0041
CVE-2020-0041 ใใฎใชใใธใใชใซใฏใCVE-2020-0041ใๆช็จใใใณใผใใๅซใพใใฆใใพใใใใฎใใฐใฏ2019ๅนด12ๆใซGoogleใซๅ ฑๅใใ2020ๅนด3ๆใฎAndroidใปใญใฅใชใใฃๆ ๅ ฑใงไฟฎๆญฃใใใพใใใ ใตใณใใใใฏในใจในใฑใผใใฎใจใฏในใใญใคใใฏsandbox/ใซใใใพใใใใฐใฎๅๆใจๆช็จๆๆณใฏใhttps://labs.bluefrostsecurity.de/blog/2020/03/31/cve-2020-0041-part-1-sandbox-escape/ ใงใ่ฆงใใใ ใใพใใ...
CVE-2007-6638
CVE-2007-6638 March Networks DVR 3204 - ใญใฐใใกใคใซๆ ๅ ฑๆผๆดฉ Exploit-DBใงใฎๅ ฌ้: https://www.exploit-db.com/exploits/4797/ ่่ Alex Hernandez ๅฅๅ @alt3kx...
ingress-nginx
Ingress NGINX ใฎๅปๆญข ๅปๆญขใซใคใใฆ Ingress NGINX ๅปๆญขใซใคใใฆ็ฅใฃใฆใใในใใใจ: ใในใใจใใฉใผใใงใฎใกใณใใใณในใฏ 2026 ๅนด 3 ๆใพใง็ถ็ถใใใพใใ ใใฎๅพใฏใๆฐ่ฆใชใชใผในใใใฐไฟฎๆญฃใ็บ่ฆใใใใปใญใฅใชใใฃ่ๅผฑๆงใซๅฏพใใใขใใใใผใใฏไธๅ่กใใใพใใใ ๆขๅญใฎ Ingress NGINX ใใใญใคใกใณใใฏๅฝฑ้ฟใๅใใพใใใ Helm ใใฃใผใใใณใณใใใคใกใผใธใชใฉใฎๆขๅญใฎใใญใธใงใฏใๆๆ็ฉใฏๅผใ็ถใๅฉ็จๅฏ่ฝใงใใ Ingress NGINX Controller ๆฆ่ฆ ingress-nginx ใฏใNGINX...
CVE-2026-57475
Deloitte AI Assist for Customer had an unauthenticated POST vulnerability on public API endpoints that allowed a remote attacker to perform limited additions to the configuration. These changes were not used by the system. On 2026-03-25, access was restricted and authentication enforced for the e...
CVE-2026-57475
Deloitte AI Assist for Customer accepted unauthenticated POST requests through public-facing API endpoints that allowed a remote attacker to make limited additions to the configuration. These additions were not used by the system. On 2026-03-25, AI Assist for Customer restricted network access an...
EUVD-2024-55647
Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting malicious HQL syntax into the uid POST parameter of the wechatLoginHelper.do endpoint. Attackers can exploit the lack of input...
CVE-2026-4764 Privilege Escalation in Dialogflow CX via Playbook Import
A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was...
EUVD-2026-36221
A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was...
CVE-2026-37709
Insecure Permissions vulnerability in grokability snipe-it v.8.4.0 and before and fixed after 2026-03-10 commit 676a9958 allows a remote attacker to execute arbitrary code via the app/Http/Controllers/Api/UploadedFilesController.php component...
CVE-2026-33583
Exposure of the QKEY used as input into the โOTA-Quantumโ device registration process and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform. This issue affects Symmetric Key Agreement Platform: before 26.03...
Wordfence Bug Bounty Program Monthly Report โ March 2026
In March 2026, the Wordfence Bug Bounty Program received 1718 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat...
Security Bulletin: NVIDIA Merlin - May 2026
NVIDIA has released a software update for NVIDIAยฎ Merlin. To protect your system, clone or update this software to include any commit after March 11, 2026 from the NVIDIA-Merlin/Transformers4Rec GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potential...
EUVD-2026-30113
Exposure of the QKEY used as input into the โOTA-Quantumโ device registration process and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform. This issue affects Symmetric Key Agreement Platform: before 26.03...
CVE-2026-21023
The vulnerability CVE-2026-21023 affects PackageManagerService prior to SMR Mar-2026 Release 1, enabling local attackers to modify installation restrictions on specific apps. Root cause: insufficient verification of data authenticity in PackageManagerService. Impact per the sources: trivial local...
Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 Attack
Checkmarx has disclosed that its ongoing investigation tied to the supply chain security incident has revealed that a cybercriminal group published data related to the company on the dark web. "Based on current evidence, we believe this data originated from Checkmarx's GitHub repository, and that...
CVE-2026-40873 mailcow: dockerized vulnerable to stored XSS in Quarantine attachment filenames
mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the Quarantine details modal injects attachment filenames into HTML without escaping, allowing arbitrary HTML/JS execution. An attacker can deliver an email with a crafted attachment name s...
Security Updates for Microsoft Windows Admin Center in Azure Portal (March 2026)
The Microsoft Windows Admin Center in Azure Portal installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability: - Elevation of Privilege vulnerability in Windows Admin Center in Azure Portal CVE-2026-23660 Note that Nessus has not tested for this issue...