The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to...
CVE-2026-9843
The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to arbitrary file deletion
2026-06-21 归档
今日共收录 748 条安全情报，包含 44 个 CVE，388 篇安全通告，以及 64 篇研究论文。
← 返回归档列表Capgo before 12.128.2 contains a scope escalation vulnerability in the POST /functions/v1/apikey...
CVE-2026-56216
Capgo before 12.128.2 contains a scope escalation vulnerability in the POST /functions/v1/apikey endpoint that allows ap
Capgo before 12.128.2 contains an information disclosure vulnerability in Supabase PostgREST RPC...
CVE-2026-56214
Capgo before 12.128.2 contains an information disclosure vulnerability in Supabase PostgREST RPC endpoints is_trial_org
Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute...
CVE-2026-9265
Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path. print_
Capgo before 12.128.2 contains an authorization bypass vulnerability in the public...
CVE-2026-56213
Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.upsert_version_meta SECURITY DEFINER
Capgo before 12.128.2 contains an authentication logic flaw: a user with permission to manage...
CVE-2026-56212
Capgo before 12.128.2 contains an authentication logic flaw: a user with permission to manage team or organization secur
Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in the...
CVE-2026-56082
Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in the SECURITY DEFINER PostgREST
Capgo before 12.128.2 contains a flaw in the Enforce Password Policy feature: after a Super Admin...
CVE-2026-56080
Capgo before 12.128.2 contains a flaw in the Enforce Password Policy feature: after a Super Admin enables the policy and
Capgo before 12.128.2 contains a cross-tenant authorization bypass vulnerability in PostgREST...
CVE-2026-56079
Capgo before 12.128.2 contains a cross-tenant authorization bypass vulnerability in PostgREST endpoints that allows org-
symfony/ux-toolkit: Path Traversal Allows Arbitrary File Write and Read via Crafted Recipe Manifest
CVE-2026-55878
### Description The `ux:install` console command installs files from a recipe kit by copying paths listed in a `copy-fil
OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types
CVE-2026-55776
On OpenBao 2.5.4 and 2.5.2(and likely earlier versions also), an authenticated caller with write access to `transit/keys
OpenBao's System Backend allows Unauthorized Management of the containing Namespace
CVE-2026-55775
### Summary A user that is granted namespace management (`/sys/namespaces`) capabilities within a non-root namespace ("
OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808
CVE-2026-55774
### Summary OpenBao users with access to the `sys/leases/revoke/:lease_id` endpoint in any namespace can revoke leases
OpenBao: LDAPi ldaputil (wrong escape func)
CVE-2026-55770
## 1. Description ### Component `sdk/helper/ldaputil/client.go` — the shared LDAP utility library used by both the LDA
StarCitizenWiki Extension Embed Video: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled
CVE-2026-55692
### Summary With $wgEmbedVideoRequireConsent enabled (the default), the urls for videos are stored in a json-ified data
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat...
CVE-2026-47645
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized atta
Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code...
CVE-2026-50519
Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized at
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
[原创]探索CVE-2026-31431的热补丁修复方案
CVE-2026-31431
[原创]探索CVE-2026-31431的热补丁修复方案