Aggregator

A vulnerability was found in Mozilla Firefox for iOS up to 152.2 and classified as problematic. This affects an unknown part of the component Navigation Handler. Executing a manipulation can lead to clickjacking. This vulnerability is handled as CVE-2026-13356. The attack can be executed remotely. There is not any exploit available.

vuldb.com

CVE-2026-53647 | FOSSBilling up to 0.7.x Serviceapikey get_info information disclosure (EUVD-2026-41973)

VulDB Recent Entries

3 weeks 1 day ago

A vulnerability has been found in FOSSBilling up to 0.7.x and classified as problematic. Affected by this issue is some unknown functionality of the file /api/guest/serviceapikey/get_info of the component Serviceapikey Module. Performing a manipulation results in information disclosure. This vulnerability is known as CVE-2026-53647. Remote exploitation of the attack is possible. No exploit is available.

vuldb.com

Aggregator

YApi v1.10.2 未授权 RCE 漏洞挖掘

Rasa漏洞复现分析（CVE-2021-42556，CVE-2021-41127，CVE-2024-49375）

记一次网站PHP后端应用的目录结构泄露引起的简单代码审计

INC

INC

【公益译文】2026年AI指数报告（六）

[remote] iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter

[webapps] WordPress Bricks Builder Theme - RCE

[webapps] Tenable Nessus 10.12.1 - SQL Injection

[webapps] Discuz! X5.0 - Authentication Bypass

[remote] Hydra - Stack Buffer Overflow

[webapps] Flowise 3.1.3 - arbitrary code execution

[local] ProtonVPN v4.4.1 - Unquoted Service Path

[webapps] MCPJam Inspector - Remote Code Execution

自带智能体：劫持暴露的AI 后端以支撑攻击性行动

Agnes AI 值得尝试吗：注册、配置与实测体验。

WinClaw新版本即将发布 10000个超级VIP限时开抢！

AI勒索攻击态势加剧制造企业怎么防

CVE-2026-13356 | Mozilla Firefox for iOS up to 152.2 Navigation clickjacking (EUVD-2026-41972)

CVE-2026-53647 | FOSSBilling up to 0.7.x Serviceapikey get_info information disclosure (EUVD-2026-41973)

Aggregator

Managed ad