Aggregator

Vibe Coding生存指南

放之
1 month 1 week ago
443个真实项目会话、84亿Token，以及无数次被Bug搞懵逼之后总结来的经验和教训。

SLH

Dark Feed IO
1 month 1 week ago

You must login to view this content

cohenido

SLH

Dark Feed IO
1 month 1 week ago

You must login to view this content

cohenido

Escape raises $18M Series A to replace legacy scanners with AI agent-driven discovery, pentesting, and remediation

Security Boulevard
1 month 1 week ago

Led by Balderton Capital, with participation of Uncorrelated Ventures and existing investors IRIS and Y Combinator, the $18M Series A financing will accelerate our mission to multiply the impact of security teams through full-lifecycle offensive security.

The post Escape raises $18M Series A to replace legacy scanners with AI agent-driven discovery, pentesting, and remediation appeared first on Security Boulevard.

Tristan Kalos

CVE-2026-30933 | gtsteffaniak filebrowser /public/api/share/info missing authentication

VulDB Recent Entries
1 month 1 week ago
A vulnerability identified as critical has been detected in gtsteffaniak filebrowser. This impacts an unknown function of the file /public/api/share/info. This manipulation causes missing authentication. This vulnerability is tracked as CVE-2026-30933. The attack is possible to be carried out remotely. No exploit exists. It is suggested to install a patch to address this issue.
vuldb.com

CVE-2026-28281 | instantsoft icms2 up to 2.18.0 cross-site request forgery (EUVD-2026-10405)

VulDB Recent Entries
1 month 1 week ago
A vulnerability was found in instantsoft icms2 up to 2.18.0. It has been rated as problematic. The impacted element is an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is referenced as CVE-2026-28281. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-28513 | pocket-id Pocket ID up to 2.3.x OIDC Token Endpoint authorization (EUVD-2026-10409)

VulDB Recent Entries
1 month 1 week ago
A vulnerability was found in pocket-id Pocket ID up to 2.3.x. It has been declared as critical. The affected element is an unknown function of the component OIDC Token Endpoint. Executing a manipulation can lead to incorrect authorization. The identification of this vulnerability is CVE-2026-28513. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-28512 | pocket-id Pocket ID up to 2.3.x redirect_uri (EUVD-2026-10407)

VulDB Recent Entries
1 month 1 week ago
A vulnerability was found in pocket-id Pocket ID up to 2.3.x. It has been classified as problematic. Impacted is an unknown function. Performing a manipulation of the argument redirect_uri results in open redirect. This vulnerability was named CVE-2026-28512. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-30883 | ImageMagick up to 6.9.13-40/7.1.2-15 PNG Image Parser memory corruption (EUVD-2026-10391)

VulDB Recent Entries
1 month 1 week ago
A vulnerability was found in ImageMagick up to 6.9.13-40/7.1.2-15 and classified as critical. This issue affects some unknown processing of the component PNG Image Parser. Such manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2026-30883. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-28692 | ImageMagick up to 6.9.13-40/7.1.2-15 MAT Decoder out-of-bounds (EUVD-2026-10387)

VulDB Recent Entries
1 month 1 week ago
A vulnerability has been found in ImageMagick up to 6.9.13-40/7.1.2-15 and classified as critical. This vulnerability affects unknown code of the component MAT Decoder. This manipulation causes out-of-bounds read. This vulnerability is handled as CVE-2026-28692. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.
vuldb.com

CVE-2026-28693 | ImageMagick up to 6.9.13-40/7.1.2-15 DIB Coder out-of-bounds write (EUVD-2026-10389)

VulDB Recent Entries
1 month 1 week ago
A vulnerability, which was classified as critical, was found in ImageMagick up to 6.9.13-40/7.1.2-15. This affects an unknown part of the component DIB Coder. The manipulation results in out-of-bounds write. This vulnerability is known as CVE-2026-28693. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.
vuldb.com

CVE-2026-28691 | ImageMagick Prior to up to 6.9.13-40/7.1.2-15 JBIG Decoder return value (EUVD-2026-10386)

VulDB Recent Entries
1 month 1 week ago
A vulnerability, which was classified as problematic, has been found in ImageMagick Prior to up to 6.9.13-40/7.1.2-15. Affected by this issue is some unknown functionality of the component JBIG Decoder. The manipulation leads to unchecked return value. This vulnerability is traded as CVE-2026-28691. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-28690 | ImageMagick up to 6.9.13-40/7.1.2-15 MNG Encoder stack-based overflow (EUVD-2026-10383)

VulDB Recent Entries
1 month 1 week ago
A vulnerability classified as critical was found in ImageMagick up to 6.9.13-40/7.1.2-15. Affected by this vulnerability is an unknown functionality of the component MNG Encoder. Executing a manipulation can lead to stack-based buffer overflow. This vulnerability appears as CVE-2026-28690. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.
vuldb.com

CVE-2025-11158 | Hitachi Vantara Pentaho Data Integration and Analytics 10.2.0.4 Groovy Script authorization (EUVD-2025-208457)

VulDB Recent Entries
1 month 1 week ago
A vulnerability classified as problematic has been found in Hitachi Vantara Pentaho Data Integration and Analytics 10.2.0.4. Affected is an unknown function of the component Groovy Script Handler. Performing a manipulation results in missing authorization. This vulnerability is reported as CVE-2025-11158. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.
vuldb.com

Managed ad