The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator...
CVE-2026-8976
The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is
2026-06-06 归档
今日共收录 1443 条安全情报，包含 665 个 CVE，387 篇安全通告，以及 120 篇研究论文。
← 返回归档列表The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More...
CVE-2026-10038
The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vul
A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium...
CVE-2026-11431
A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and A
MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage...
CVE-2026-11416
MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage download handlers where
Twig: Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points
CVE-2026-47732
### Description `SandboxNodeVisitor` enforces `SecurityPolicy::checkMethodAllowed()` for implicit `__toString()` calls
Twig: XSS in profiler HtmlDumper via unescaped template and profile names
CVE-2026-47730
### Description `Twig\Profiler\Dumper\HtmlDumper` writes `Profile::getTemplate()` and `Profile::getName()` straight int
A path traversal vulnerability exists in the Altium Enterprise Server Collaboration Service due...
CVE-2026-11423
A path traversal vulnerability exists in the Altium Enterprise Server Collaboration Service due to improper handling of
A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in...
CVE-2026-11414
A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in the Vault service. Beca
Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise...
CVE-2026-11420
Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise Server allow an unauth
The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the...
CVE-2026-5411
The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for Wor
A path traversal vulnerability exists in the Altium Enterprise Server Vault Service...
CVE-2026-11419
A path traversal vulnerability exists in the Altium Enterprise Server Vault Service UploadController due to improper val
Shopper: Authorization bypass and RBAC privilege escalation in team settings
CVE-2026-47744
## Impact Two distinct authorization defects in the team settings allowed any authenticated panel user to take over the
Shopper: Multiple data integrity and disclosure issues in admin Livewire components
CVE-2026-47743
## Impact Three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and sto
NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that...
CVE-2025-71317
NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative acce
On affected platforms with hardware IPSec support running Arista EOS with certain IPsec features...
CVE-2026-2379
On affected platforms with hardware IPSec support running Arista EOS with certain IPsec features enabled, EOS may exhibi
NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A...
CVE-2025-71318
NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated
DbGate: Unauthenticated Remote Code Execution via JSON Script Runner
CVE-2026-47668
### Summary DbGate's JSON script runner (`POST /runners/start`) allows remote code execution via code injection in the `
NocoDB: Stored Cross-Site Scripting via Form View Redirect URL
CVE-2026-47387
### Summary The shared form-view submit handler in NocoDB writes the form's `redirect_url` to `window.location.href` af
NocoDB: Server-Side Request Forgery via Database Connection Host
CVE-2026-47382
### Summary The connection-test endpoint opened a raw TCP socket to the user-supplied database host without resolving an
Firefox browsers
Firefox browsers