Aggregator

2026年6月29日 09:45云计算, 科技资讯01.34K

欧盟委员会总部“分楼层开空调”引发争议在热浪席卷欧洲之际，位于比利时布鲁塞尔的欧盟委员会总部却因“只为欧盟委员会主席冯德莱恩等高层提供凉爽的办公环境”引发争议。欧盟委员会总部贝雷蒙大楼共13层，冯德莱

A vulnerability identified as problematic has been detected in Knowage up to 6.x/7.4.21/8.0.8. The affected element is the function XSSRequestWrapper::stripXSS. The manipulation leads to improper neutralization of alternate xss syntax. This vulnerability is documented as CVE-2022-39295. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability described as problematic has been identified in Ree6 up to 1.9.8. This impacts an unknown function of the component Log Handler. Such manipulation leads to incorrect authorization. This vulnerability is traded as CVE-2022-39302. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability has been found in sra-admin 1.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Profile Picture Handler. Performing a manipulation results in basic cross site scripting. This vulnerability was named CVE-2022-39301. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

A vulnerability was found in ZoneMinder. It has been rated as critical. The affected element is an unknown function of the file /zm/index.php of the component HTTP POST Request Handler. Performing a manipulation results in injection. This vulnerability is known as CVE-2022-39291. Remote exploitation of the attack is possible. Furthermore, an exploit is available. To fix this issue, it is recommended to deploy a patch.

A vulnerability was found in Azure RTOS USBX 6.1.12 and classified as critical. Affected by this issue is the function _ux_host_class_pima_read of the file ux_host_class_pima_read.c. The manipulation results in buffer overflow. This vulnerability is identified as CVE-2022-39293. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.93/6.18.35/7.0.12. This impacts the function fqdir_pre_exit of the component inet. The manipulation of the argument fragments_tail leads to use after free. This vulnerability is referenced as CVE-2026-53175. The attack needs to be initiated within the local network. No exploit is available. It is advisable to upgrade the affected component.

Currently trending CVE - Hype Score: 3 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization names containing path traversal sequences (../) are accepted by Gogs, and repositories under them are written to paths following these path traversals. This allows storing/retrieving data for ...

Currently trending CVE - Hype Score: 2 - In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail to propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()->flags ...

Currently trending CVE - Hype Score: 34 - A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. In the router configuration import function allows an authenticated attacker to upload a crafted ...

Currently trending CVE - Hype Score: 3 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, (*Repository).UploadRepoFiles checks for symlinks only on the leaf of the upload target (osx.IsSymlink(targetPath)). The siblings UpdateRepoFile, DeleteRepoFile, and GetDiffPreview use hasSymlinkInPath, which ...

Currently trending CVE - Hype Score: 3 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution (RCE) on the server by creating a pull request with a specially crafted branch name that injects the --exec flag into the git rebase command during ...

Currently trending CVE - Hype Score: 16 - NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

Currently trending CVE - Hype Score: 1 - An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authantication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS ...

Currently trending CVE - Hype Score: 1 - A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected ...

Name: V1T CTF 2026 (an V1t CTF event.)
Date: June 27, 2026, 2 a.m. — 28 June 2026, 14:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.v1t.site/
Rating weight: 22.14
Event organizers: R4wr

Name: MntcrlCTF 2026 (an MNTCRL CTF event.)
Date: June 27, 2026, 4 p.m. — 28 June 2026, 16:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.mntcrl.it/
Rating weight: 0
Event organizers: M0NT3C4RL0