2026-05-23 归档

今日共收录 869 条安全情报，包含 93 个 CVE，394 篇安全通告，以及 104 篇研究论文。

漏洞预警2026-05-22 发布HIGH

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It al...

CVE-2026-25606

CVE-2026-25606 是 STER 应用程序中的一个 SQL 注入漏洞，影响版本 9.5 之前。该漏洞存在于多个搜索过滤器组件中，由于未能正确中和用户输入，经过身份验证的攻击者可以通过注入恶意 SQL 语句，查看其他用户的敏感数据以

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-22 发布MEDIUM

The MotoPress Hotel Booking plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.1. This is due to the plugin not properly verify...

CVE-2026-8684

MotoPress Hotel Booking插件是WordPress上的一款酒店预订管理插件。在版本6.0.1及之前的所有版本中，存在授权绕过漏洞。该漏洞源于插件未能正确验证用户是否有权限执行操作，导致未认证的攻击者可以通过提供任意预订I

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-22 发布MEDIUM

A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain backend API endpoints do not correctly enforce authorization...

CVE-2026-8381

TeamViewer DEX Platform (On-Premises) 版本 9.2 之前存在因访问控制失效引起的安全漏洞。该漏洞源于部分后端 API 端点未能正确实施授权检查，导致低权限认证用户可以执行仅限高权限角色才能执行的操作，并

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-22 发布HIGH

A bitwise shift vulnerability in Zephyr's PTP subsystem allows a remote attacker to cause undefined behavior and potential system crashes. An attacker sends a crafted PTP_MSG_MA...

CVE-2026-5072

CVE-2026-5072 是 Zephyr 实时操作系统 (RTOS) PTP (Precision Time Protocol) 子系统中的一个位位移漏洞。该漏洞允许远程攻击者通过发送特制的 PTP_MSG_MANAGEMENT 消息，

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-22 发布MEDIUM

The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Draft Post Title in all versions up to, and including, 2.6.3 due to insufficient input sanit...

CVE-2026-9104

该漏洞位于WordPress的Draft List插件（版本2.6.3及以下）中，由于对用户输入的草稿文章标题缺乏充分的清理和输出转义，导致存储型跨站脚本攻击（Stored XSS）。攻击者需拥有作者级别或更高权限，可以通过在草稿标题中注入

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-22 发布HIGH

The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via the `easy...

CVE-2026-9018

WordPress插件Easy Elements for Elementor（所有版本至1.4.5）存在权限提升漏洞。插件的`easyel_handle_register()`函数通过`wp_ajax_nopriv_eel_register

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-05-22 发布MEDIUM

The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `the-subtitle` shortcode `before` and `after` attributes in all versions up t...

CVE-2026-7509

CVE-2026-7509 是 WordPress KIA Subtitle 插件（版本 ≤ 4.0.1）中一个存储型跨站脚本（XSS）漏洞。该漏洞存在于插件的 `the-subtitle` 短代码的 `before` 和 `after`

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-22 发布MEDIUM

The Location Weather plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the `splw_update_block_options()` and `lwp_clean...

CVE-2026-7249

CVE-2026-7249 是一个影响 WordPress Location Weather 插件（版本 ≤ 3.0.2）的漏洞。该插件存在两个函数（splw_update_block_options() 和 lwp_clean_weath

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-22 发布MEDIUM

There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control mechanism, attackers can obtain information without author...

CVE-2026-44409

ZTE MU5250 因访问控制机制配置不当，存在信息泄露漏洞。攻击者可在无需认证的情况下，通过邻近网络利用该漏洞获取敏感信息，导致信息泄露风险。该漏洞的 CVSS 评分为 5.7（中等），影响机密性（高），但对完整性和可用性无影响。目前未

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-22 发布MEDIUM

The WP Blockade plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode' parameter in all versions up to and including 0.9.14. This is due to ins...

CVE-2026-3481

CVE-2026-3481 是 WordPress WP Blockade 插件中的一个反射型跨站脚本（XSS）漏洞，影响版本 0.9.14 及之前的所有版本。该漏洞位于 render_shortcode_preview() 函数中，该函数

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-22 发布INFO

The FastX theme for WordPress is vulnerable to unauthorized limited plugin installation and activation due to missing capability checks on the 'ultp_install_callback' and 'ultp_...

CVE-2026-2518

The FastX theme for WordPress is vulnerable to unauthorized limited plugin installation and activation due to missing ca

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-22 发布INFO

An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic.

CVE-2026-9054

An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel p

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-22 发布INFO

Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website with a malicious default file path, and then conceal this f...

CVE-2026-9053

Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website wi

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-22 发布INFO

The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'search_key' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escapi...

CVE-2026-4834

The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'search_key' parameter in all versions up to,

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-22 发布INFO

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.

CVE-2026-46598

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-22 发布INFO

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

CVE-2026-46597

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafte

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-22 发布INFO

Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-ad...

CVE-2026-46595

Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of cal

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-22 发布INFO

Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.

CVE-2026-42508

Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-22 发布INFO

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. Cert...

CVE-2026-39835

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be c

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-22 发布INFO

When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinite...

CVE-2026-39834

When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload

历史摘要 · 未重新核验 · NVD

#cve