Aggregator

先说结论：这行署名不是你仓库里的 hook 或模板加的，是 Cursor 自己塞的。关掉开关只能管住以后，已经 […]

A vulnerability marked as problematic has been reported in thedotmack claude-mem up to 11.0.1. The affected element is the function computeObservationContentHash of the file src/services/sqlite/observations/store.ts of the component Observation Content Hash Handler. This manipulation causes use of weak hash. The identification of this vulnerability is CVE-2026-11330. The attack can only be executed locally. There is no exploit available. It is suggested to upgrade the affected component.

CodeBuddy Security 双引擎协同架构，将 AI 深度审计与静态分析结合，实现漏洞从发现到确证闭环。

Infosecurity Europe 2026 is a cybersecurity event that took place from June 2 to 4 in London. Help Net Security was on-site and here’s a closer look at the conference. The featured vendors are: Microsoft, JupiterOne, Menlo Security, Cato Networks, Falkin, Vivida, Pen Test Partners, Netskope, Qualys, Syteca, runZero, Vanta, OneTrust, Panaseer, Airia.

The post Photos: Infosecurity Europe 2026 appeared first on Help Net Security.

阅读： 10https://wireshark.cloud/此网站相当于远程解析pcap文件。传个pcap上去，它通过网页展示报文解析结果。怎么说呢，借助现代浏

error code: 1003

牙科福利管理机构 DentaQuest 发生数据泄露事件，据报道已暴露 260 万账户的敏感信息。 该安全事件于上月曝光，当时臭名昭著的勒索组织 ShinyHunters 将该公司的数据列在其泄露网站上，并声称已窃取超过 234 GB 的数据。据该威胁行为者称，在与公司未能达成协议后，这些数据被公开泄露。 DentaQuest 是 Sun Life 旗下的子公司，也是美国最大的牙科福利管理机构之一...

A vulnerability labeled as problematic has been found in HCL DX Compose 9.5. Impacted is an unknown function. The manipulation results in cross site scripting. This vulnerability was named CVE-2026-21825. The attack may be performed from remote. There is no available exploit.

A vulnerability identified as problematic has been detected in HCL Digital Experience & DX Compose 9.5. This issue affects some unknown processing of the component Header Handler. The manipulation of the argument Host leads to open redirect. This vulnerability is uniquely identified as CVE-2026-21826. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as critical has been discovered in HCL Digital Experience 9.5. This vulnerability affects unknown code of the component Digital Asset Management API. Executing a manipulation can lead to os command injection. This vulnerability is handled as CVE-2026-21837. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in decompress. It has been rated as problematic. This affects an unknown part of the component ZIP Handler. Performing a manipulation results in path traversal: '\..\filename'. This vulnerability is known as CVE-2026-10732. Remote exploitation of the attack is possible. No exploit is available.

Submit #832401 / VDB-368870

A vulnerability was found in onnx onnx-mlir up to 0.5.0.0. It has been declared as problematic. Affected by this issue is the function generate_hash_key of the file src/Runtime/python/torch_onnxmlir/src/torch_onnxmlir/backend.py of the component Placeholder Node Cache Handler. Such manipulation leads to use of weak hash. This vulnerability is traded as CVE-2026-11329. An attack has to be approached locally. There is no exploit available. Applying a patch is advised to resolve this issue.

A few months ago, I wrote a diary about a payload that was embedded into a JPEG picture. It was a M

2026年6月5日 14:45软件资讯00.45K

Our TLS inspection proxy PolarProxy has been updated with bug fixes, improved performance and more reliable PCAP output. The recent PolarProxy 2.0 release added musl/Alpine compatibility and support for unencrypted HTTP proxy requests. But there were a few small, yet very important, updates that unf[...]

,  Friday, 05 June 2026 06:45:00 (UTC/GMT)

Press enter or click to view image in full sizeMy journey into cloud computing and the concepts that

Submit #832358 / VDB-368865