2026-05-28 归档

今日共收录 1581 条安全情报，包含 810 个 CVE，383 篇安全通告，以及 109 篇研究论文。

← 返回归档列表

漏洞预警2026-05-27 发布INFO

The affiliate-toolkit plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 3.8.5. This is due to the plugin using the BladeOne templ...

CVE-2026-6169

The affiliate-toolkit plugin for WordPress is vulnerable to remote code execution in all versions up to, and including,

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-05-27 发布INFO

Cross-site request forgery (CSRF) vulnerabilities allow attackers to exploit a user's authenticated session to forge cross-site requests, inducing the execution of unintended op...

CVE-2026-49001

Cross-site request forgery (CSRF) vulnerabilities allow attackers to exploit a user's authenticated session to forge cro

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-05-27 发布INFO

AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every response, which reads response['value']['result']['compile_...

CVE-2026-41704

AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every re

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-05-27 发布INFO

When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by AgentClient. inject_compile_log (line 332-339) reads response['value...

CVE-2026-41009

When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by AgentClient

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-05-27 发布INFO

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dsgvo_contracts view due to improper neutralization of special elements in a ...

CVE-2026-40826

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dsgvo_contracts view

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view devices parameter due to improper neutralization of specia...

CVE-2026-40825

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view d

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view userid parameter due to improper neutralization of special...

CVE-2026-40824

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view u

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset function due to improper neutralization of special elements in...

CVE-2026-40823

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset function due to improper neutralization of special elements in...

CVE-2026-40822

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in...

CVE-2026-40821

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the sync_data24 task due to improper neutralization of special elements in a SQL...

CVE-2026-40819

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the sync_data24 task du

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24confi_getDevice function due to improper neutralization of special elem...

CVE-2026-40818

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24confi_getDevic

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of special elements...

CVE-2026-40817

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles fu

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the mb24alarm.php files _mb24confi_getTagAlarm function due to improper neutrali...

CVE-2026-40816

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the mb24alarm.php files

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24api_getUserAccount function due to improper neutralization of special e...

CVE-2026-40815

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24api_getUserAcc

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dataapi.php files _mb24confi_getTagAlarm function due to improper neutraliza...

CVE-2026-40814

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dataapi.php files _

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues functions tagid parameter due to improper neutralization of sp...

CVE-2026-40813

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues functions sn parameter due to improper neutralization of speci...

CVE-2026-40812

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the ssoabstractservice due to improper neutralization of special elements in a S...

CVE-2026-40811

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the ssoabstractservice

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-05-27 发布INFO

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the userinfo endpoint due to improper neutralization of special elements in a SQ...

CVE-2026-40810

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the userinfo endpoint d

历史摘要 · 未重新核验 · NVD

#cve #cwe-89