WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection...
CVE-2026-41924
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the makeRequest
2026-05-05 归档
今日共收录 918 条安全情报，包含 208 个 CVE，383 篇安全通告，以及 47 篇研究论文。
← 返回归档列表A security flaw has been discovered in Open5GS up to 2.7.7. Affected is the function...
CVE-2026-7779
A security flaw has been discovered in Open5GS up to 2.7.7. Affected is the function udm_nudr_dr_handle_subscription_aut
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection...
CVE-2026-41922
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the wireless.cg
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2026-6074. Reason: This record is a...
CVE-2026-34882
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2026-6074. Reason: This record is a reservation duplicate o
IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any...
CVE-2025-67796
IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access t
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over...
CVE-2026-43964
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash v
OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the...
CVE-2026-38751
OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionali
Conditional Fields for Contact Form 7 WordPress plugin through version 2.6.7 contains an...
CVE-2026-25863
Conditional Fields for Contact Form 7 WordPress plugin through version 2.6.7 contains an uncontrolled resource consumpti
ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView
CVE-2026-42601
The /add/ endpoint (AddView in core/views.py) accepts a config JSON field that gets merged into the crawl config without
apko dirFS has a symlink-following path traversal that allows multiple entry points to escape the build root
CVE-2026-42574
### Impact A crafted `.apk` could install a `TypeSymlink` tar entry whose target pointed outside the build root, and a
Pelican Web UI Affected by a Privilege Escalation Attack
CVE-2026-42571
## Background On April 2nd, 2026, a Claude coding agent alerted Pelican PI Brian Bockelman to a privilege escalation vu
quarkus-openapi-generator has overly broad path-parameter matching that sends authentication headers to unintended operations
CVE-2026-42333
### Summary The generated authentication filter matches OpenAPI path templates too broadly when deciding whether to att
changedetection.io project has an XXE vulnerability
CVE-2026-41895
# changedetection.io_XXE_01 Vulnerability Report: We discovered a XXE vulnerability in the changedetection.io project W
Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force)
CVE-2026-41893
## Summary The HTTP login endpoints (`POST /login` and `POST /signalk/v1/auth/login`) are protected by `express-rate-li
CI4MS has a Deactivated User Session Bypass (active=0)
CVE-2026-41891
### Summary The auth filter has the deactivated/banned user check commented out. ### Details CodeIgniter Shield's `log
CI4MS Vulnerable to Arbitrary Database Table Drop via Theme deleteProcess
CVE-2026-41890
### Summary The `deleteProcess()` action accepts a POST parameter `tables[]` containing arbitrary table names. These are
Distribution's tag deletion bypasses `storage.delete.enabled` configuration
CVE-2026-41888
### Summary Tag deletion via the `DELETE /v2//manifests/` endpoint bypasses the `storage.delete.enabled: false` configu
Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)
CVE-2026-42311
### Impact Processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrar
Pillow has a PDF Parsing Trailer Infinite Loop (DoS)
CVE-2026-42310
### Impact An attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and m
Pillow has an integer overflow when processing fonts
CVE-2026-42308
If a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may