Aggregator

往期推荐：2026年AI指数报告（五）3.5.负责任的人工智能政策制定负责任的人工智能治理取决于各国是否采纳

iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter

WordPress Bricks Builder Theme - RCE

Tenable Nessus 10.12.1 - SQL Injection

Discuz! X5.0 - Authentication Bypass

Hydra - Stack Buffer Overflow

Flowise 3.1.3 - arbitrary code execution

ProtonVPN v4.4.1 - Unquoted Service Path

MCPJam Inspector - Remote Code Execution

免费开放、配额充足、使用方便！

快来注册体验吧！

防攻击、防篡改、可恢复，守护制造企业生产连续性。

A vulnerability was found in Mozilla Firefox for iOS up to 152.2 and classified as problematic. This affects an unknown part of the component Navigation Handler. Executing a manipulation can lead to clickjacking. This vulnerability is handled as CVE-2026-13356. The attack can be executed remotely. There is not any exploit available.

A vulnerability has been found in FOSSBilling up to 0.7.x and classified as problematic. Affected by this issue is some unknown functionality of the file /api/guest/serviceapikey/get_info of the component Serviceapikey Module. Performing a manipulation results in information disclosure. This vulnerability is known as CVE-2026-53647. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability, which was classified as problematic, was found in Bixilon Minosoft. Affected by this vulnerability is an unknown functionality of the file CryptManager.kt of the component CryptManager. Such manipulation leads to missing encryption of sensitive data. This vulnerability is traded as CVE-2024-56141. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in FOSSBilling up to 0.8.0. Affected is the function md5 of the component File Storage. This manipulation causes unrestricted upload. This vulnerability appears as CVE-2026-53648. The attack may be initiated remotely. There is no available exploit.

2026年6月底，《纽约时报》披露了一件事，让美国华盛顿情报圈里的人同时皱起了眉头。白宫通过国家情报总监办公