Aggregator

AI 漏洞挖掘开始交付"工程化结果" 从音频解码到工业 CAD，从车端 CAN 帧到企业 Java 中间件——这一次，AI 红队没有靠"灵感"。

AI 漏洞挖掘开始交付"工程化结果" 从音频解码到工业 CAD，从车端 CAN 帧到企业 Java 中间件——这一次，AI 红队没有靠"灵感"。

Secure philanthropy needs hardened payments, API security, and compliance controls to protect global donations from fraud and attacks.

A vulnerability described as critical has been identified in IBM Langflow Desktop 1.8.4. The impacted element is an unknown function of the component URL Handler. Executing a manipulation can lead to path traversal. This vulnerability is registered as CVE-2026-3345. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability, which was classified as critical, was found in IBM Langflow Desktop up to 1.8.4. Affected by this vulnerability is an unknown functionality of the component URL Handler. Such manipulation leads to path traversal. This vulnerability is traded as CVE-2026-4502. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability has been found in IBM Langflow Desktop up to 1.8.4 and classified as critical. Affected by this issue is some unknown functionality of the component Web UI. Performing a manipulation results in sql injection. This vulnerability is known as CVE-2026-3346. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as critical, has been found in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. This vulnerability is handled as CVE-2026-7554. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability was found in IBM Langflow Desktop up to 1.8.4 and classified as critical. This affects an unknown part. Executing a manipulation can lead to server-side request forgery. This vulnerability is handled as CVE-2026-3340. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability classified as problematic was found in NVIDIA HGX and DGX B300. This issue affects some unknown processing of the component CX8 MCU. The manipulation results in hardware internal or debug modes allow override of locks. This vulnerability is cataloged as CVE-2025-33242. The attack may be launched remotely. There is no exploit available.

A vulnerability described as problematic has been identified in mutt up to 2.3.1. This vulnerability affects the function data_object_to_stream of the file crypt-gpgme.c. Executing a manipulation can lead to incorrect check of function return value. This vulnerability is handled as CVE-2026-43863. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability classified as problematic has been found in mutt up to 2.3.1. This issue affects the function show_sig_summary. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2026-43864. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability labeled as problematic has been found in mutt up to 2.3.1. Affected by this issue is the function url_pct_decode. Such manipulation leads to improper neutralization of null byte or nul character. This vulnerability is traded as CVE-2026-43861. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in mutt up to 2.3.1. This affects the function imap_auth_gss. Performing a manipulation results in type confusion. This vulnerability is known as CVE-2026-43862. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in mutt up to 2.3.1. The affected element is the function hash_passwd of the component IMAP. This manipulation causes off-by-one. The identification of this vulnerability is CVE-2026-43860. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in mutt up to 2.3.1. Impacted is the function auth_cram. The manipulation results in improper neutralization of null byte or nul character. This vulnerability was named CVE-2026-43859. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

Компания признала факт взлома, но исключила влияние инцидента на разработку GTA VI.

Microsoft has confirmed that the April 2026 security updates are causing failures in third-party backup applications using the psmounterex.sys driver. [...]

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Linux Kernel to its Known Exploited Vulnerabilities catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in the Linux Kernel, tracked as CVE-2026-31431 (CVSS score of 7.8), to its Known Exploited Vulnerabilities (KEV) catalog. Recently, Xint Code researchers warned of a serious Linux […]

最高 5088 一年。