PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
2026-06-19 归档
今日共收录 997 条安全情报，包含 210 个 CVE，375 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Acknowledgements
Acknowledgements
The Security Lottery: Measuring Client-Side Web Security Inconsistencies.
本文系统性研究了客户端 Web 安全机制在不同浏览器及浏览器扩展之间存在的安全不一致性问题。作者首先对常见的客户端安全机制（如内容安全策略 CSP、XSS 过滤器、跨域资源共享 CORS、HSTS 等）进行了梳理，并基于安全策略的生效条件、
SQL injection in pgAdmin 4's named restore point endpoint (POST /browser/server/restore_point/...
CVE-2026-12050
SQL injection in pgAdmin 4's named restore point endpoint (POST /browser/server/restore_point/{gid}/{sid}). The user-sup
HTML injection in pgAdmin 4's cloud deployment module. The verify_credentials, deploy, regions,...
CVE-2026-12047
HTML injection in pgAdmin 4's cloud deployment module. The verify_credentials, deploy, regions, and update-server endpoi
Improper input validation in AVer PTC500S, PTC115, PTC500+, and PTC115+ cameras may allow a...
CVE-2026-40624
Improper input validation in AVer PTC500S, PTC115, PTC500+, and PTC115+ cameras may allow a remote, unauthenticated att
Open redirect in pgAdmin 4's multi-factor authentication flow. The MFA validate and register...
CVE-2026-12049
Open redirect in pgAdmin 4's multi-factor authentication flow. The MFA validate and register endpoints honoured the user
Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate...
CVE-2026-47647
Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to...
CVE-2026-54130
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information ove
Read-only transaction bypass in the pgAdmin 4 AI Assistant allows an attacker who can influence...
CVE-2026-12045
Read-only transaction bypass in the pgAdmin 4 AI Assistant allows an attacker who can influence database content that th
Impact A security issue has been identified in Chef 360 that could allow unauthorized access to...
CVE-2026-8100
Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints
Hashgraph Guardian through 3.5.0, fixed in commit ba8c566, contains a stored cross-site scripting...
CVE-2026-22674
Hashgraph Guardian through 3.5.0, fixed in commit ba8c566, contains a stored cross-site scripting vulnerability that all
Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints
CVE-2026-55591
### Summary signalk-server versions up to and including 2.27.0 contain a Server-Side Request Forgery (SSRF) vulnerabilit
gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)
CVE-2026-0755
Untrusted prompt input could reach the Gemini CLI @file parser, allowing read/exfiltration of arbitrary local files (@/e
JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability...
CVE-2026-54390
JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticate
The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and...
CVE-2026-54103
The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contrac
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were...
CVE-2026-38717
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a co
The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and...
CVE-2026-54105
The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contrac
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were...
CVE-2026-38716
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a co
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were...
CVE-2026-38715
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a co