2026软件系统安全赛traffic_hunt
溯源流量题目：traffic_hunt
Aggregator
Lynx
1 week 4 days ago
You must login to view this content
cohenido
Critical flaw in wolfSSL library enables forged certificate use
1 week 4 days ago
A critical vulnerability in the wolfSSL SSL/TLS library can weaken security via improper verification of the hash algorithm or its size when checking Elliptic Curve Digital Signature Algorithm (ECDSA) signatures. [...]
Bill Toulas
High-Value Brazilian E-commerce Source Code and Database Advertised
1 week 4 days ago
You must login to view this content
cohenido
Lamashtu
1 week 4 days ago
You must login to view this content
cohenido
Lamashtu
1 week 4 days ago
You must login to view this content
cohenido
Lamashtu
1 week 4 days ago
You must login to view this content
cohenido
Lamashtu
1 week 4 days ago
You must login to view this content
cohenido
Lamashtu
1 week 4 days ago
You must login to view this content
cohenido
Lamashtu
1 week 4 days ago
You must login to view this content
cohenido
Lamashtu
1 week 4 days ago
You must login to view this content
cohenido
Lamashtu New threat Actor
1 week 4 days ago
You must login to view this content
cohenido
Lamashtu
1 week 4 days ago
You must login to view this content
cohenido
Робот-баскетболист, который никогда не устает и не просит рекламных контрактов. Toyota показала CUE7 в деле
1 week 4 days ago
Новая машина метко бросает с дальней дистанции и заодно показывает, как Toyota развивает машинное зрение, управление и физический ИИ.
CVE-2026-40042 | Pachno 1.0.6 XML Parser simplexml_load_string file descriptor (ZSL-2026-5984)
1 week 4 days ago
A vulnerability classified as critical was found in Pachno 1.0.6. The impacted element is the function simplexml_load_string of the component XML Parser. The manipulation results in exposure of file descriptor to unintended control sphere ('file descriptor leak').
This vulnerability is known as CVE-2026-40042. It is possible to launch the attack remotely. No exploit is available.
vuldb.com
CVE-2026-40043 | Pachno 1.0.6 runSwitchUser authorization (ZSL-2026-5985)
1 week 4 days ago
A vulnerability classified as problematic has been found in Pachno 1.0.6. The affected element is the function runSwitchUser. The manipulation leads to authorization bypass.
This vulnerability is traded as CVE-2026-40043. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
[Control systems] ABB security advisory (AV26-346)
1 week 4 days ago
Canadian Centre for Cyber Security
CVE-2026-6100 | Python CPython up to 3.14.x Decompression Call use after free (ID 148395)
1 week 4 days ago
A vulnerability described as critical has been identified in Python CPython up to 3.14.x. Impacted is the function lzma.LZMADecompressor/bz2.BZ2Decompressor/gzip.GzipFile of the component Decompression Call Handler. Executing a manipulation can lead to use after free.
This vulnerability appears as CVE-2026-6100. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is recommended.
vuldb.com
CVE-2026-28291 | steveukx git-js up to 3.31.x os command injection (GHSA-jcxm-m3jx-f287)
1 week 4 days ago
A vulnerability marked as critical has been reported in steveukx git-js up to 3.31.x. This issue affects some unknown processing. Performing a manipulation results in os command injection.
This vulnerability is reported as CVE-2026-28291. The attack is possible to be carried out remotely. No exploit exists.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2026-32605 | nimiq core-rs-albatross up to 1.2.x validators.num_validators out-of-bounds
1 week 4 days ago
A vulnerability labeled as problematic has been found in nimiq core-rs-albatross up to 1.2.x. This vulnerability affects the function validators.num_validators. Such manipulation leads to out-of-bounds read.
This vulnerability is documented as CVE-2026-32605. The attack can be executed remotely. There is not any exploit available.
The affected component should be upgraded.
vuldb.com