Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation
CVE-2026-46640
### Description The `obj.(expr)` dynamic-attribute syntax (added in 3.15.0 as the replacement for the deprecated `attri
2026-05-23 归档
今日共收录 869 条安全情报，包含 93 个 CVE，394 篇安全通告，以及 104 篇研究论文。
← 返回归档列表Twig: Sandbox property and method bypass via object-destructuring assignment
CVE-2026-46639
### Description The object-destructuring assignment syntax introduced in Twig 3.24.0 generates a call to `CoreExtension
Concrete CMS 9.5.0 and below is vulnerable to authorization Bypass in the Calendar Event Frontend...
CVE-2026-8204
Concrete CMS 9.5.0 and below is vulnerable to authorization Bypass in the Calendar Event Frontend Dialog which can allow
Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to ...
CVE-2026-8417
Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/do_up
Concrete CMS 9.5.0 and below is vulnerable to missing authorization in the bulk_user_assignment...
CVE-2026-8350
Concrete CMS 9.5.0 and below is vulnerable to missing authorization in the bulk_user_assignment.php which can lead to pr
Concrete CMS 9.5.0 and below contains a CSRF vulnerability in the install_package() method of...
CVE-2026-8421
Concrete CMS 9.5.0 and below contains a CSRF vulnerability in the install_package() method of concrete/controllers/singl
Concrete CMS 9.5.0 and below is vulnerable to authorization bypass in the Calendar Block since...
CVE-2026-8205
Concrete CMS 9.5.0 and below is vulnerable to authorization bypass in the Calendar Block since action_get_events does no
Concrete CMS 9.5.0 and below is vulnerable to Remote Code Execution due to insecure...
CVE-2026-8135
Concrete CMS 9.5.0 and below is vulnerable to Remote Code Execution due to insecure deserialization occurring in the Ex
Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration name. The OAuth...
CVE-2026-8197
Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration name. The OAuth authorize template render
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
CVE-2026-34910
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipu...
CVE-2026-34909
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to a
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.
CVE-2026-34908
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS de
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
CVE-2026-33000
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerabilit
The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'bookingpress_validate_submitted_booking_form_func' ...
CVE-2026-6960
The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in
Deserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializer could bypass documented DeserializationPolicy validation hooks during reduce-state restoration...
CVE-2026-48207
Deserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializer could bypass documented Deserializati
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
In Other News: Industrial Router Exploitation, CISA KEV Nomination Form, Gas Station Hacking
Other noteworthy stories that might have slipped under the radar: CISA contractor exposes credentials, Mythos testing an
Measuring Safety Alignment Effects in Autonomous Security Agents
该论文研究了安全对齐语言模型及其未审查或消融版本在作为自主安全代理运行时的行为差异。传统的单轮拒绝基准无法评估代理的实际情况，因为安全代理需要检查代码仓库、调用工具并在授权沙箱中生成漏洞证据。作者提出了一个基于追踪的基准测试，包含30个本地
STER uses unencrypted TCP traffic to transmit data over the network. It allows an attacker to conduct a Man-In-The-Middle attack and obtain sensitive data such as passwords, pe...
CVE-2026-25608
CVE-2026-25608 是 STER 软件中的一个漏洞，该软件在网络上传输数据时使用未加密的 TCP 流量。攻击者可以利用此漏洞实施中间人（MITM）攻击，拦截并窃取敏感数据，包括密码、个人身份信息和认证令牌。由于通信未加密，攻击者能
The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.65. This is due to t...
CVE-2026-9011
WordPress插件Ditty（Responsive News Tickers, Sliders, and Lists）的所有版本直至3.1.65存在授权绕过漏洞。该漏洞源于插件在AJAX请求处理中未正确验证用户权限。具体来说，`ditt