A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. Impacted...
CVE-2026-7675
A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. Impacted is the function start_l
2026-05-04 归档
今日共收录 673 条安全情报，包含 62 个 CVE，343 篇安全通告，以及 15 篇研究论文。
← 返回归档列表A vulnerability was detected in crmeb_java up to 1.3.4. This vulnerability affects unknown code...
CVE-2026-7673
A vulnerability was detected in crmeb_java up to 1.3.4. This vulnerability affects unknown code of the file crmeb/crmeb-
Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header...
CVE-2026-40561
Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectl
A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file ...
CVE-2026-7670
A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSumma
A security vulnerability has been detected in youlaitech youlai-boot up to 2.21.1. This affects...
CVE-2026-7672
A security vulnerability has been detected in youlaitech youlai-boot up to 2.21.1. This affects the function getUserList
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-6481
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A vulnerability was found in ruvnet sublinear-time-solver 1.5.0. Affected by this vulnerability...
CVE-2026-7645
A vulnerability was found in ruvnet sublinear-time-solver 1.5.0. Affected by this vulnerability is the function export_s
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
京公网安备 11000002002063号
输入内容为公安备案信息，未提供任何威胁情报摘要、技术细节或攻击指标。标题和来源URL显示为京公网安备号，而非安全报告正文。标签包含360、APT、恶意软件等关键词，但缺乏具体描述，无法获取有效情报。
（总）网出证（京）字第281号
输入内容为360公司网站备案信息（网出证（京）字第281号），非威胁情报报告。标题和来源URL指向360.cn的licence页面，tags虽标注了360, report, apt, malware，但实际正文缺失，不包含任何攻击活动、漏洞
京网文〔2020〕6051-1195号
原文内容缺失，仅根据标题和标签推断为360CERT发布的一份涉及APT和恶意软件的安全报告。具体技术细节、攻击活动、威胁行为者等信息均未提供。标题“京网文〔2020〕6051-1195号”可能为版权或备案号，而非情报内容。发布时间为2026
京ICP证080047号[京ICP备08010314号-6]
此次输入内容仅包含一个ICP备案号（京ICP证080047号）与备案号（京ICP备08010314号-6），来源为360CERT安全报告，但报告摘要或正文内容为空，发布时间为2026年（未来）。标签包含360、report、apt、malw
A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerability is the function validate_restricted_url of the component Webhook/Notificati...
CVE-2026-7724
CVE-2026-7724 影响 PrefectHQ 的 Prefect 版本直至 3.6.28.dev1。该漏洞存在于 Webhook/Notification 组件的 validate_restricted_url 函数中，属于时间检查
A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of the component WebSocket Endpoint. Executing a manipulation...
CVE-2026-7723
该漏洞影响 PrefectHQ Prefect 版本 up to 3.6.13。问题存在于 WebSocket 端点的 /api/events/in 文件中，由于缺少身份验证机制，远程攻击者无需任何权限即可利用此漏洞。攻击者可以通过发送特制
A vulnerability was detected in PrefectHQ prefect up to 3.6.21. This impacts the function endswith of the file /api/health of the component Health Check API. Performing a manipu...
CVE-2026-7722
该漏洞影响 PrefectHQ prefect 版本 3.6.21 及之前版本。漏洞位于健康检查 API 组件 `/api/health` 的 `endswith` 函数中，存在身份验证不当的问题，攻击者可以远程利用该漏洞，无需任何权限即可
A security vulnerability has been detected in Totolink WA300 5.2cu.7112_B20190227. This affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. Such manipulation ...
CVE-2026-7721
Totolink WA300 路由器固件版本 5.2cu.7112_B20190227 中存在一个命令注入漏洞，位于 /cgi-bin/cstecgi.cgi 文件的 NTPSyncWithHost 函数中。攻击者可以通过向 hostTim
A weakness has been identified in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST...
CVE-2026-7720
CVE-2026-7720 是一个影响 Totolink WA300 路由器（固件版本 5.2cu.7112_B20190227）的命令注入漏洞。漏洞位于 /cgi-bin/cstecgi.cgi 文件中的 setLanguageCfg 函
A vulnerability was identified in Totolink WA300 5.2cu.7112_B20190227. Impacted is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component POST Request Hand...
CVE-2026-7718
该漏洞影响 Totolink WA300 路由器固件版本 5.2cu.7112_B20190227。问题出在 /cgi-bin/cstecgi.cgi 文件的 setWebWlanIdx 函数中，POST 请求处理程序对参数 webWlan
A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component POST ...
CVE-2026-7717
CVE-2026-7717 是 Totolink WA300 路由器固件版本 5.2cu.7112_B20190227 中存在的一个缓冲区溢出漏洞。漏洞位于 /cgi-bin/cstecgi.cgi 文件的 UploadCustomModu
A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0. This vulnerability affects unknown code of the file /index.php. Performing a manipula...
CVE-2026-7716
CVE-2026-7716 是 code-projects 开发的 Gym Management System（PHP 版本，Windows NT 1.0）中的一个 SQL 注入漏洞。该漏洞位于 /index.php 文件，攻击者可以通过操