CVE-2026-84409

The Lantronix G520 Series Cellular Gateway is vulnerable to a Cross-site Scripting (XSS) flaw in its update mechanism. The device retrieves update metadata over an unencrypted HTTP connection and stores it; a management interface then returns this data in a JSON response, which the web interface ...

CVE-2026-100293

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hashing. This design allows an attacker who can reach the update routine to introduce untrusted firmware images that the...

EUVD-2026-89368

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hashing. This design allows an attacker who can reach the update routine to introduce untrusted firmware images that the...

CVE-2026-100293 Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hashing. This design allows an attacker who can reach the update routine to introduce untrusted firmware images that the...

CVE-2026-100293 Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hashing. This design allows an attacker who can reach the update routine to introduce untrusted firmware images that the...

CVE-2026-100293

Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 contains a vulnerability in its local and cloud update mechanisms. The system applies new firmware without cryptographic verification , relying solely on basic hashing. This allows an attacker with network access to the update routine to inject and ...

Script-For-CVE-2024-20666

CVE-2024-20666 修复脚本 自动更新 WinRE 分区（无需先调整其大小）并修补 CVE-2024-20666 BitLocker 漏洞。 微软链接（脚本在此） 适用于 Windows Server 2022（服务器核心安装）（KB5034439：适用于 Azure Stack HCI 版本 22H2 和 Windows Server 2022 的 Windows 恢复环境更新：2024 年 1 月 9 日） Windows Server 2022（KB5034439：适用于 Azure Stack HCI 版本 22H2 和 Windows Server 2022 的...

CVE-2017-1000117

用 CVE-2017-1000117 启动服务器的东西 运行以下命令，然后启动 Web 浏览器，访问 http://localhost:8088 试试吧！ $ git clone --recursive https://github.com/0gawa/CVE-2017-1000117 如果显示 Hello World，那就更新 git 吧！有漏洞。...

eclipse__hawkbit_CVE-2020-27219_0-3-0M6

Eclipse hawkBit™ - 更新服务器 Eclipse hawkBit 是一个领域无关的后端解决方案，用于向受限的边缘设备以及连接在基于 IP 的网络基础设施上的更强大的控制器和网关推送软件更新。 构建: Docker: 文档 参见 hawkBit 文档 联系我们 想与 hawkBit 背后的团队聊天？ 遇到 hawkBit 问题？请提交一个 GitHub issue。 您也可以查看我们的项目主页以获取更多联系方式。 示例与扩展 除了此处托管的 hawkBit 核心之外，该项目还维护着示例和扩展仓库。 hawkBit 沙盒 我们提供一个可免费供所有人试用 hawkBit...

Microsoft-2024-December-Update-Control

Windows 2024年12月安全补丁审计脚本 此 PowerShell 脚本用于检查系统中是否已安装 2024 年 12 月 Microsoft 安全公告中公布的特定漏洞（CVE-2024-49124、CVE-2024-49117、CVE-2024-49118 和 CVE-2024-49122）所需的 KB 更新。脚本通过检测操作系统版本来确定需要应用哪些补丁，并首先将检测到的操作系统显示在屏幕上。 功能特性 CVE 检查： 检查以下 CVE 对应的 KB 更新： CVE-2024-49124 CVE-2024-49117 CVE-2024-49118 CVE-2024-49122...

CVE-2026-84784

A flaw was found in OpenSSL. A remote attacker can cause a Denial of Service DoS by flooding a connection with connection identifier update requests while withholding acknowledgments. This behavior bypasses connection limits and forces the system to accumulate pending retirement frames, resulting...

Statement

声明 关于 CVE-2021-36593 和 CVE-2021-36594，我想说明的是，我只提交了一个拆分 CVE-ID 的请求。（两年前） 由于目前没有可用的更新，CVE-ID 将在未来几个月内发布。我们暂时推迟了发布流程。...

CVE-2026-92223 Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260910 - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to update the workflow stage of inaccessible contents...

CVE-2026-92223 Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260910 - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to update the workflow stage of inaccessible contents...

CVE-2026-86035

Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 2026.7.1 contains an argument-injection vulnerability in its Mercurial backend. Repository filenames beginning with - could be interpreted as Mercurial options instead of literal...

CVE-2026-102570

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the language update function where the languageid parameter is concatenated unescaped into the WHERE clause of an UPDATE statement. An authenticated administrator with basicsettings permission can inject...

CLSA-2026-1790694436 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.20-tuxcare.2...

CLSA-2026-1790694250 TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 23 org.springframework packages to address 3 CVEs. Fixed in 5.3.33-tuxcare.2...

CVE-2026-86035

Weblate versions 4.11.1 through 2026.7.1 are vulnerable to an argument-injection flaw in the Mercurial backend . The root cause is that repository filenames starting with a hyphen (-) may be misinterpreted as Mercurial options rather than literal paths. An authenticated user with component.edit p...

CVE-2026-86035 Weblate: Mercurial argument injection via repository filenames allows authenticated command execution

Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 2026.7.1 contains an argument-injection vulnerability in its Mercurial backend. Repository filenames beginning with - could be interpreted as Mercurial options instead of literal...