MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage...
CVE-2026-11416
MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage download handlers where
2026-06-07 归档
今日共收录 735 条安全情报，包含 30 个 CVE，368 篇安全通告，以及 77 篇研究论文。
← 返回归档列表Twig: Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points
CVE-2026-47732
### Description `SandboxNodeVisitor` enforces `SecurityPolicy::checkMethodAllowed()` for implicit `__toString()` calls
Twig: XSS in profiler HtmlDumper via unescaped template and profile names
CVE-2026-47730
### Description `Twig\Profiler\Dumper\HtmlDumper` writes `Profile::getTemplate()` and `Profile::getName()` straight int
A path traversal vulnerability exists in the Altium Enterprise Server Collaboration Service due...
CVE-2026-11423
A path traversal vulnerability exists in the Altium Enterprise Server Collaboration Service due to improper handling of
A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in...
CVE-2026-11414
A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in the Vault service. Beca
Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise...
CVE-2026-11420
Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise Server allow an unauth
The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the...
CVE-2026-5411
The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for Wor
A path traversal vulnerability exists in the Altium Enterprise Server Vault Service...
CVE-2026-11419
A path traversal vulnerability exists in the Altium Enterprise Server Vault Service UploadController due to improper val
Shopper: Authorization bypass and RBAC privilege escalation in team settings
CVE-2026-47744
## Impact Two distinct authorization defects in the team settings allowed any authenticated panel user to take over the
Shopper: Multiple data integrity and disclosure issues in admin Livewire components
CVE-2026-47743
## Impact Three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and sto
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
Background Security Improvements for iOS, iPadOS, and macOS
iOS 16.7.15 and iPadOS 16.7.15
iOS 16.7.15 and iPadOS 16.7.15
iOS 15.8.7 and iPadOS 15.8.7
iOS 15.8.7 and iPadOS 15.8.7