首页 > 专栏 > PHP Bugs PHP Bugs 共 103 条资讯 Monero: `set_daemon` wallet-rpc silently ignores `ssl_allowed_fingerprints` → pinning bypassed, wallet↔daemon MITM 2026-06-27 16:20:01 Monero: Restricted RPC Policy Bypass on ZMQ JSON-RPC Allows Unauthenticated Remote Admin Actions 2026-06-27 16:20:01 Monero: Wallet RPC Restricted-Mode Policy Bypass 2026-06-27 16:20:01 Yelp: Debug Deep Link Abuse Allows Repeated Forced Logout and Application Disruption 2026-06-27 16:20:01 curl: Cookie jar load skips public suffix check on PSL builds 2026-06-27 16:20:01 curl: libcurl cache updates follow symlinks and truncate their targets 2026-06-27 16:20:01 curl: Windows SSPI connection-pool probe can reuse a connection under the wrong user 2026-06-27 16:20:01 Nextcloud: TaskProcessing callback authorization bypass allows ex-members to post as Assistant Talk Bot 2026-06-27 16:20:01 Myndr: Myndr CORS Misconfiguration 2026-06-27 16:20:01 [$500] 8x8: JaaS SIP Gateway Authorization Bypass 2026-06-27 16:20:01 [$100] CoinMate.io: Adding phone number to profile By OTP brute forcing 2026-06-27 16:20:01 Nintendo: [Wii U/3DS/Switch] Improper bounds check in StationURL in all NEX clients leading to remote crash/RCE 2026-06-27 16:20:01 curl: URL API: triple-slash parses path segment as hostname 2026-06-27 16:20:01 [$12000] Mozilla: Unauthenticated RCE in Taskcluster web-server via GraphQL filter argument (sift $where) 2026-06-27 16:20:01 curl: Heap use-after-free (write) in mev_forget_socket() via reentrant curl_easy_pause() — incomplete fix for CVE-2026-9080 2026-06-27 16:20:01 Monero: `relay_tx` wallet-rpc skips `--restricted-rpc` guard and lets any caller corrupt wallet state via attacker-controlled `pending_tx` 2026-06-27 16:20:01 Monero: wallet-rpc describe_transfer uses real_output_in_tx_index instead of real_output: cold-wallet pre-sign review shows wrong ring member 2026-06-27 16:20:01 Monero: SpendProofV1 txid-substitution: get_spend_proof/check_spend_proof do not verify returned transaction hash 2026-06-27 16:20:01 Monero: wallet-rpc crash via malformed /gettransactions response (empty txs → vector::front() in check_tx_key / check_tx_proof) 2026-06-27 16:20:01 Monero: `check_reserve_proof` sums RingCT ECDH amounts without checking the output commitment 2026-06-27 16:20:01 123…6下一页 » 相关分类 P #!/slash/note #UNTAG (B)(F)uzzing on my world (Hi)story (IN)SECURE Magazine Notification (gdb) break *0x972 - 带鱼博客 BeltfishBlog - ./kwaa.dev .NET Blog .Trash /home/rook1e 00's Adventure 0kami's Blog 0x41414141 in ?? () 0x7f Blog 0xRick Owned Root ! 0xd00's blog 1 Byte 1A23 Blog 1A23 Studio 1Link.Fun 1stwebdesigner 251 2BAB 的工程博客 2ch中文网 360 CERT 360 Netlab Blog - Network Securi 38号车评中心 3o米的微博