首页 > 专栏 > PHP Bugs PHP Bugs 共 250 条资讯 Monero: Loss of multisig funds through single malicious participant's deliberate deception 2026-06-27 16:20:01 Monero: monero:// deeplink parsing accepts tx_amount=(all) and can trigger send-all transaction mode 2026-06-27 16:20:01 Monero: Windows installer grants low-privileged users write access to executable P2Pool directory, enabling local code execution 2026-06-27 16:20:01 Monero: HTML Injection in Transaction Confirmation Dialog via Address Book Description Enables UI Spoofing Before Fund Transfer 2026-06-27 16:20:01 Monero: View-only offline transaction creation bypasses the long-payment-ID privacy block 2026-06-27 16:20:01 Monero: Monero GUI OpenAlias DNSSEC-invalid resolution still writes spoofable address into recipient field 2026-06-27 16:20:01 curl: Domainless COOKIEFILE cookie leaks to unrelated IP-literal hosts 2026-06-27 16:20:01 Monero: `set_daemon` wallet-rpc silently ignores `ssl_allowed_fingerprints` → pinning bypassed, wallet↔daemon MITM 2026-06-27 16:20:01 Monero: Restricted RPC Policy Bypass on ZMQ JSON-RPC Allows Unauthenticated Remote Admin Actions 2026-06-27 16:20:01 Monero: Wallet RPC Restricted-Mode Policy Bypass 2026-06-27 16:20:01 Yelp: Debug Deep Link Abuse Allows Repeated Forced Logout and Application Disruption 2026-06-27 16:20:01 curl: Cookie jar load skips public suffix check on PSL builds 2026-06-27 16:20:01 curl: libcurl cache updates follow symlinks and truncate their targets 2026-06-27 16:20:01 curl: Windows SSPI connection-pool probe can reuse a connection under the wrong user 2026-06-27 16:20:01 Nextcloud: TaskProcessing callback authorization bypass allows ex-members to post as Assistant Talk Bot 2026-06-27 16:20:01 Myndr: Myndr CORS Misconfiguration 2026-06-27 16:20:01 [$500] 8x8: JaaS SIP Gateway Authorization Bypass 2026-06-27 16:20:01 [$100] CoinMate.io: Adding phone number to profile By OTP brute forcing 2026-06-27 16:20:01 Nintendo: [Wii U/3DS/Switch] Improper bounds check in StationURL in all NEX clients leading to remote crash/RCE 2026-06-27 16:20:01 curl: URL API: triple-slash parses path segment as hostname 2026-06-27 16:20:01 « 上一页1…678910…13下一页 » 相关分类 P #!/slash/note #UNTAG (B)(F)uzzing on my world (Hi)story (IN)SECURE Magazine Notification (gdb) break *0x972 - 带鱼博客 BeltfishBlog - ./kwaa.dev .NET Blog .Trash /home/rook1e 00's Adventure 0kami's Blog 0x41414141 in ?? () 0x7f Blog 0xRick Owned Root ! 0xd00's blog 1 Byte 1A23 Blog 1A23 Studio 1Link.Fun 1stwebdesigner 251 2BAB 的工程博客 2ch中文网 360 CERT 360 Netlab Blog - Network Securi 38号车评中心 3o米的微博