0 Comentarios
0 Acciones
662 Vistas
0 Reseñas
Directorio
Descubre gente nueva, crea nuevas conexiones y haz nuevos amigos.
-
Inicia sesión para indicar que te gusta, compartir y comentar.
-
Vulnerabilidade CVE-2026-12866 - Detalhes do CVSS, EPSS e KEV | CVE Find (Portuguese (Brazil))T├¡tulo: Vulnerabilidade CVE-2026-12866 - Detalhes do CVSS, EPSS e KEV | CVE FindSum├írioO CVE-2026-12866 ├® uma vulnerabilidade de seguran├ºa no pacote `expr-eval` que permite a execu├º├úo de c├│digo arbitr├írio atrav├®s da API `toJSFunction()`. Um atacante pode executar JavaScript arbitr├írio fornecendo express├Áes maliciosas compiladas em c├│digo nativo usando `new Function()`. Devido ├á...0 Comentarios 0 Acciones 4K Vistas 0 Reseñas
-
Vulnerabilitas CVE-2026-12866: Deteksi CVSS, EPSS, dan Kev | CVE FindVulnerabilitas CVE-2026-12866Vulnerabilitas CVE-2026-12866: Deteksi CVSS, EPSS, dan Kev | CVE FindRingkasanCVE-2026-12866 adalah vulnerability yang melibatkan paket expr-eval versi 0. Dampaknya dapat menyebabkan eksekusi JavaScript secara arbitrer oleh pengguna yang tidak berhak.Apa itu Vulnerabilitas/Exploit?Vulnerabilitas ini terjadi karena fungsi toJSFunction() dari paket expr-eval versi 0...0 Comentarios 0 Acciones 2K Vistas 0 Reseñas
-
Open VSX Registry Vulnerability Allows Stored XSS and Session HijackingOpen VSX Registry Vulnerability Allows Stored XSS and Session HijackingSummaryOpen VSX Registry does not sanitize SVG files uploaded as extension icons prior to storage and serves them with Content-Type: image/svg+xml without security headers such as Content-Security-Policy or Content-Disposition: attachment, allowing an attacker to publish an extension with a malicious SVG icon and achieve...0 Comentarios 0 Acciones 3K Vistas 0 Reseñas
-
Traefik HTTP/2 Denial-of-Service VulnerabilityTraefik HTTP/2 Denial-of-Service VulnerabilityTraefik HTTP/2 Denial-of-Service VulnerabilitySummaryThis article provides a detailed technical explanation of the CVE-2023-54365 vulnerability in Traefik, which affects versions 2.10.5 and 3.0.0-beta4. The vulnerability allows remote attackers to rapidly create and cancel HTTP/2 streams, exhausting server resources and causing service...0 Comentarios 0 Acciones 5K Vistas 0 Reseñas
-
CVE-2026-4983 - Detalle CVSS, EPSS y CISA Kev | CVE Find (Bengali)ÓªÂÓºüÓªºÓºüÓª«Óª¥ÓªñÓºìÓª░ Óª¬ÓºìÓª░ÓªñÓª┐ÓªÀÓºìÓªáÓª¥Óª¿ÓºçÓª░ Óª©Óª¥ÓªÑÓºç Óª»ÓºïÓªùÓª¥Óª»Óª╝ ÓªàÓª¿ÓºìÓª» Óª©ÓºçÓªòÓªÂÓª¿ÓºçÓª░ Óª¼Óª┐ÓªÂÓºçÓªÀ ÓªòÓª¥Óª£ ÓªòÓª░ÓªñÓºç Óª╣Óª¼ÓºçÓÑñ ÓªÅÓª«Óª¿Óª¡Óª¥Óª¼Óºç, Óª¬ÓºìÓª░ÓªñÓª┐ÓªÀÓºìÓªáÓª¥Óª¿ÓºçÓª░ Óª©Óª¥ÓªÑÓºç Óª»ÓºïÓªùÓª¥Óª»Óª╝ ÓªàÓª¿ÓºìÓª» Óª©ÓºçÓªòÓªÂÓª¿ÓºçÓª░ Óª¼Óª┐ÓªÂÓºçÓªÀ ÓªòÓª¥Óª£ ÓªòÓª░ÓªñÓºç Óª╣Óª¼ÓºçÓÑñReferencesOriginal reference:...0 Comentarios 0 Acciones 3K Vistas 0 Reseñas
-
Titel (i dansk)Titel (i dansk)Sammendrag (i dansk)Hvad er vulnerability/exploitet omkring?Open VSX Registry ikke sanitiserer SVG-filer der bliver uploade som ekstensionsikoner f├©r lagring, og servere dem med Content-Type: image/svg+xml uden sikkerhedsheder som Content-Security-Policy eller Content-Disposition: attachment. Det g├©r det muligt for et attacker at publicere en ekstension med en misbrugelig...0 Comentarios 0 Acciones 3K Vistas 0 Reseñas
-
Titel (i dansk)Titel (i dansk)Sammendrag (i dansk)CVE-2026-4983 er en sikkerhedsvilk├Ñrlighedsfejl, der kan lede til stored cross-site scripting (XSS) hvis en bruger navigerer direkte til et ikon URL for en udvidelse. Dennefejl har f├©lgende effekter:1. **Local Storage**: Scripteksekution sker indenfor Open VSX-applikationens origin, hvilket giver mulighed for sessionhijacking, autentifikationsautotjekning og...0 Comentarios 0 Acciones 3K Vistas 0 Reseñas1
-
0 Comentarios 0 Acciones 212 Vistas 0 Reseñas
-
0 Comentarios 0 Acciones 275 Vistas 0 Reseñas