A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. Affected is the function change_wifi_password of the file /cgi-bin/adm.cgi. The manipulation of the argument wl_...

CVE-2026-8188

A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. Affected is the function change_wifi_password of the fi

历史摘要 · 未重新核验 · NVD

The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for WordPress is vulnerable to Authentication Bypass to Information Disclosure in version...

CVE-2026-8198

The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for WordPress is vulnerable to A

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in Open5GS up to 2.7.7. This affects the function ogs_sbi_client_send_via_scp_or_sepp in the library lib/sbi/client.c of the component NF. Performin...

CVE-2026-8186

A vulnerability was detected in Open5GS up to 2.7.7. This affects the function ogs_sbi_client_send_via_scp_or_sepp in th

历史摘要 · 未重新核验 · NVD

A flaw has been found in Open5GS up to 2.7.7. This impacts the function _gtpv1_u_recv_cb of the file src/upf/gtp-path.c of the component UPF. Executing a manipulation can lead t...

CVE-2026-8187

A flaw has been found in Open5GS up to 2.7.7. This impacts the function _gtpv1_u_recv_cb of the file src/upf/gtp-path.c

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in UGREEN CM933 1.1.59.4319. The impacted element is an unknown function of the component Administrative Interface. Such manipulation ...

CVE-2026-8185

A security vulnerability has been detected in UGREEN CM933 1.1.59.4319. The impacted element is an unknown function of t

历史摘要 · 未重新核验 · NVD

Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with v...

CVE-2026-3828

Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command executi

历史摘要 · 未重新核验 · NVD

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk. Attackers can exploit this by eavesdropping ...

CVE-2026-32683

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transm

历史摘要 · 未重新核验 · NVD

There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.

CVE-2026-1749

There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated u

历史摘要 · 未重新核验 · NVD

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a cra...

CVE-2026-42311

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could

历史摘要 · 未重新核验 · NVD

Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 1...

CVE-2026-42310

Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF

历史摘要 · 未重新核验 · NVD

Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs that accept coordinates such as ImagePath.Path, Ima...

CVE-2026-42309

Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to

历史摘要 · 未重新核验 · NVD

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it ...

CVE-2026-42308

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amo

历史摘要 · 未重新核验 · NVD

A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL acce...

CVE-2025-15634

A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to vie

历史摘要 · 未重新核验 · NVD

An improper authorization vulnerability in HCL BigFix WebUI allows an authenticated user without Master Operator privileges to access internal data (site names, versions, and co...

CVE-2025-15633

An improper authorization vulnerability in HCL BigFix WebUI allows an authenticated user without Master Operator privile

历史摘要 · 未重新核验 · NVD

决赛直播｜第四届阿里CTF安全挑战赛

该信息为阿里CTF安全挑战赛决赛直播的公告，发布于先知社区。内容仅涉及比赛时间、形式等组织性信息，不包含任何安全威胁、漏洞、攻击活动或恶意软件相关情报。属于正常的安全竞赛活动宣传，无安全分析价值。

历史摘要 · 未重新核验 · 先知社区

新司令18家通杀！2025双11安全保卫战最终奖励揭榜

该文章为2025年双11安全保卫战最终奖励揭榜公告，由新司令发起，覆盖18家厂商的通杀活动。活动旨在鼓励白帽黑客发现并提交漏洞，提升企业安全防护水平。文章公布了获奖名单及奖励金额，但未涉及具体漏洞细节、攻击技术或威胁情报。这是一项社区安全竞

历史摘要 · 未重新核验 · 先知社区

阿里CTF 2026火热来袭！顶尖阵容 × AI融合 × 一血豪礼，等你来战！

该文章为阿里CTF 2026竞赛的宣传公告，主要介绍赛事亮点：顶尖战队阵容、AI与CTF的深度结合，以及一血豪礼等奖励机制。文章发布于先知社区，面向安全爱好者，不涉及任何真实的网络威胁、漏洞或攻击活动。

历史摘要 · 未重新核验 · 先知社区

报名开启｜2026阿里白帽大会议程发布

2026年阿里白帽大会（Alibaba White Hat Conference）将于近期举行，目前报名通道已开启。大会旨在促进白帽黑客与安全社区交流，分享最新安全研究、漏洞挖掘经验和防御技术。本次会议议程包括主题演讲、技术分论坛、CTF竞

历史摘要 · 未重新核验 · 先知社区

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

该输入为阿里云2027届实习生招聘公告，发布于先知社区，内容为招聘信息，不涉及任何网络安全威胁、漏洞、攻击活动或防御技术。文章仅描述招聘岗位、条件及公司愿景，无安全情报价值。

历史摘要 · 未重新核验 · 先知社区

网络安全信息与动态周报-2026年第13期

本报告为国家互联网应急中心（CNCERT）发布的2026年第13期网络安全信息与动态周报。报告通常汇总过去一周国内外的网络安全动态、漏洞信息、恶意程序活动、安全事件等，为政府机构和行业用户提供态势感知参考。由于输入中未提供报告正文，无法获取

历史摘要 · 未重新核验 · CNCERT