disclosure-check

Disclosure Check Disclosure Check 是一款用于识别开源项目漏洞披露机制的工具。 警告 该项目仍在开发中，可能无法在许多不同的项目上正常工作。如果你遇到 bug， 请提交 issue，我们会尽力解决。欢迎提交 pull request！ 为什么需要这个工具 大多数开源项目使用公共 issue 跟踪器来处理入站请求、bug 报告等。由于这种方式不适合 报告新的漏洞，许多项目为用户提供了其他机制来提交敏感报告。 遗憾的是，目前没有广泛使用的、机器可读的方式来发现某个项目的这类机制。相反，人类可能 需要查找 SECURITY.md 文件（并通读它）、查看...

OpenAI agent breached Australian government site, took months to report it

An OpenAI agent didn’t take “no” for an answer when it encountered a government website’s access controls. It got through, prompting Australia’s Prime Minister Anthony Albanese to raise his concerns directly with OpenAI CEO Sam Altman. The BBC reports that an OpenAI agent gained unauthorized acce...

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

CVE-2026-81181

SysReptor , a customizable pentest reporting platform, is vulnerable to session fixation in the password authentication flow for protected shared notes. Prior to version 2026.68 , the session identifier is not rotated after successful authentication. An attacker who places an unauthenticated sess...

EUVD-2026-83251

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, an unauthenticated attacker who holds a public read-write note share link can disclose an uploaded file or image from the same project by updating the shared note to reference the target asset filename. The...

CVE-2026-1029

CVE-2026-1029 affects IBM Common Licensing Agent 9.0, 9.0.0.1, 9.0.0.2, ART 9.0, 9.0.0.1, and 9.0.0.2 (also identified as IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent ). The vulnerability is a cross-site scripting (XSS) flaw that allows users to embed ...

CVE-2026-93603

creationtimestamp| type| source ---|---|--- 2026-09-18 14:21:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117292483452078658 2026-09-18 15:06:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsgypqkbn2e 2026-09-18 16:07:30+00:00| seen|...

BIT-MONGODB-2026-82070 Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface

A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations. The same credentials are properly redacted in server log output, but the diagnostic...

sysreptor v2026.75

An easy and customizable pentest reporting platform designed to simplify pentest report creation for security professionals. Playground • Ideas • Questions • Documentation • Features and Pricing • Installation • Buy SysReptor SysReptor is a fully customizable pentest reporting platform designed f...

CVE-2026-92047

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Crash Reporting component...

Oracle Linux 10 : unbound (ELSA-2026-68291)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68291 advisory. - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zo...

unbound security update

1.24.2-20 - Backport additional fix of locks during initialization 1.24.2-19 - Fix CVE-2026-50252: prevent cache poisoning via shared ports 1.24.2-18 - Add unit tests for CVE-2026-44690,55973 1.24.2-17 - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow 1.24.2-16 - Fix CVE-2026-44690 ...

Linux Distros Unpatched Vulnerability : CVE-2026-92047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

SUSE CVE-2026-92047

Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92047

Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

DEBIAN-CVE-2026-92047

Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92047

Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

UBUNTU-CVE-2026-92047

Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92047 Privilege escalation in the Crash Reporting component

Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92047 Privilege escalation in the Crash Reporting component

Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...