2575 matches found
SoliditySecurity
What's this Esta publicación pretende ser una introducción relativamente profunda y actualizada que detalla los errores pasados cometidos por desarrolladores de Solidity, con el fin de evitar que los futuros desarrolladores repitan la historia. Table of Contents 1. Reentrancia La Vulnerabilidad...
LOLBAS
Living Off The Land 二进制文件、脚本（现在还包括库） 所有不同的文件都可以通过一个漂亮的界面找到：https://lolbas-project.github.io（感谢 @ConsciousHacker 提供了美观的前端，以及 https://gtfobins.github.io/ 的团队）。 该仓库用于维护驱动前端展示的 YML 文件。 目标 LOLBAS 项目的目标是记录每一个可用于 Living Off The Land 技术的二进制文件、脚本和库。 标准 一个 LOLBin/Lib/Script 必须满足：...
tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated
Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid...
tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated
Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid...
tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated
Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid...
tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated
Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid...
CVE-2026-29628
CVE-2026-29628 desbordamiento de búfer en el parser experimental de tinyobjloader Resumen Desbordamiento de búfer basado en pila en https://github.com/tinyobjloader/tinyobjloader, solo afecta a la versión experimental, lo que puede provocar resultados inesperados. Versiones afectadas tinyobjloade...
CVE-2026-80274
A flaw was found in BIND. A remote attacker, by sending a specially crafted DNSSEC-signed authoritative zone reply, can trigger an unexpected program exit in the validating resolver. This can lead to a Denial of Service DoS for the affected BIND resolver. Mitigation To mitigate this issue, disabl...
CVE-2026-84552
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...
CVE-2026-65358
A race condition was addressed with improved state handling. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...
CVE-2026-65407
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, tvOS 27, visionOS 26.6, visionOS 27,...
CVE-2026-65410
The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...
tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated
Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid...
tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated
Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid...
PT-2026-91645
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to cause unexpected system termination...
PT-2026-91610
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...
Winrar-Exploit-CVE-2023-38831
WinRAR 漏洞利用构建器 WinForms / .NET Framework WinRAR 版本低于 6.23 概述 此存储库包含一个用 C .NET Framework 4.8 编写的小型 Windows 桌面/控制台实用程序，演示了安全研究领域中常讨论的存档结构技术 。 关于 CVE-2023-38831 高层概述 该项目在网上常与 CVE-2023-38831 关联，该漏洞是 WinRAR 的一个问题，其中特制的存档可导致用户在与看似无害的文件交互时运行意外内容 。 影响（概念性） ：社会工程 + 令人困惑的存档内容可导致执行用户未预期的内容。 应对措施 ：将 WinRAR...
CVE-2026-90461
OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTPS Basic Authentication...
