A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function sys_login1 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr ...

CVE-2026-8230

A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function sys_login1 of the file /cgi-bin/lo

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argume...

CVE-2026-8229

A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_...

CVE-2026-8228

A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-

历史摘要 · 未重新核验 · NVD

A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. ...

CVE-2026-8227

A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pcc_rule_install_flow_from_media in the library /lib/proto/types.c. The m...

CVE-2026-8226

A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pcc_rule_install

历史摘要 · 未重新核验 · NVD

A vulnerability was identified in Open5GS up to 2.7.7. This affects the function pcf_npcf_smpolicycontrol_handle_delete of the file src/pcf/sm-sm.c of the component delete Endpo...

CVE-2026-8225

A vulnerability was identified in Open5GS up to 2.7.7. This affects the function pcf_npcf_smpolicycontrol_handle_delete

历史摘要 · 未重新核验 · NVD

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int var...

CVE-2026-7568

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() f

历史摘要 · 未重新核验 · NVD

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains...

CVE-2026-7262

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP serve

历史摘要 · 未重新核验 · NVD

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when SoapServer is configured with SOAP_PERSISTENCE_SESSION, the handler o...

CVE-2026-7261

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when SoapServer i

历史摘要 · 未重新核验 · NVD

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, a mismatch between encoding lists in Oniguruma and mbfl leads to  a NULL p...

CVE-2026-7259

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, a mismatch betwee

历史摘要 · 未重新核验 · NVD

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype functions...

CVE-2026-7258

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, i

历史摘要 · 未重新核验 · NVD

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an U...

CVE-2026-6735

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanit

历史摘要 · 未重新核验 · NVD

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension's object deduplication mechanism stores pointers to PHP...

CVE-2026-6722

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extensio

历史摘要 · 未重新核验 · NVD

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird driver improperly handles NUL bytes when preparing SQL qu...

CVE-2025-14179

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird

历史摘要 · 未重新核验 · NVD

Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project file is used.

CVE-2026-45184

Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project file is used.

历史摘要 · 未重新核验 · NVD

Hex-Rays IDA Pro 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation (via argument injection), which allows attackers to place their code into a plugins di...

CVE-2026-45181

Hex-Rays IDA Pro 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation (via argument injection), whi

历史摘要 · 未重新核验 · NVD

决赛直播｜第四届阿里CTF安全挑战赛

第四届阿里CTF（网络安全技术挑战赛）决赛于2026年5月11日通过线上直播形式举行。该赛事由阿里巴巴主办，旨在通过实战化场景考验参赛者的渗透测试、漏洞挖掘、逆向分析等综合安全能力，推动网络安全人才培养和技术交流。决赛内容涉及多类安全挑战，

历史摘要 · 未重新核验 · 先知社区

新司令18家通杀！2025双11安全保卫战最终奖励揭榜

文章来自先知社区，标题为'新司令18家通杀！2025双11安全保卫战最终奖励揭榜'。内容似乎是关于2025年双11期间举办的安全保卫战竞赛的奖励揭晓，提及'新司令'和'18家通杀'等术语，可能指竞赛中某团队或选手成功攻破18家目标并获得奖励

历史摘要 · 未重新核验 · 先知社区

阿里CTF 2026火热来袭！顶尖阵容 × AI融合 × 一血豪礼，等你来战！

本文是一篇关于阿里CTF 2026竞赛的宣传文章，发布于先知社区。内容主要介绍赛事的亮点：顶尖参赛阵容、AI与CTF的融合、一血（First Blood）奖励等，旨在吸引安全爱好者报名参赛。文章不涉及任何具体的威胁情报、漏洞信息、攻击活动或

历史摘要 · 未重新核验 · 先知社区

报名开启｜2026阿里白帽大会议程发布

2026年阿里白帽大会议程正式发布，报名通道同步开启。该会议是阿里安全面向白帽黑客、安全研究员和行业从业者举办的年度技术盛会，旨在分享前沿安全研究成果、实战攻防经验与行业最佳实践。本次大会将涵盖云安全、Web安全、移动安全、物联网安全、红蓝

历史摘要 · 未重新核验 · 先知社区