Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP)...
CVE-2026-0278
Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow
2026-07-10 归档
今日共收录 1398 条安全情报，包含 466 个 CVE，522 篇安全通告，以及 115 篇研究论文。
← 返回归档列表A Local File Inclusion (LFI) vulnerability exists in docuForm GmbH Client v.11.11c that allows a...
CVE-2026-51925
A Local File Inclusion (LFI) vulnerability exists in docuForm GmbH Client v.11.11c that allows a remote attacker to exec
Mercusys MW302R MW302R(EU)_V1_1.4.10 Build 231023 is vulnerable to Buffer Overflow in the...
CVE-2026-31267
Mercusys MW302R MW302R(EU)_V1_1.4.10 Build 231023 is vulnerable to Buffer Overflow in the administrative web interface.
An issue in docuForm GmbH FSM Client v.11.11c allows a remote attacker to obtain sensitive...
CVE-2026-51926
An issue in docuForm GmbH FSM Client v.11.11c allows a remote attacker to obtain sensitive information via the login.php
The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and...
CVE-2026-13492
The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.65. This
Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book...
CVE-2025-63579
Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The secu
pypdf: Possible infinite loop when processing threads/articles in writer
CVE-2026-54651
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires mergi
Sylius: Channel-based payment method restriction bypass on shop account orders API endpoint
CVE-2026-53638
### Impact An authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/
YesWiki Vulnerable to Authenticated PHP Object Injection in BazarImportAction via unserialize
CVE-2026-52777
## Details ### Sink `tools/bazar/services/CSVManager.php` line 372-399: ``` public function importEntry(array $import
YesWiki has Authenticated SQL Injection via ReactionManager
CVE-2026-52775
## Summary YesWiki through the latest development branch contains a SQL injection vulnerability in `ReactionManager::de
YesWiki has stored XSS in Bazar form-field templates via unescaped field.label / field.hint (|raw('html'))
CVE-2026-52772
# Bazar form-field templates still apply `|raw('html')` to `field.label` / `field.hint` in attribute and label-body cont
YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)
CVE-2026-52771
## Summary `ApiController::deletePage()` interpolates a page tag retrieved from the database into a `DELETE FROM …_links
YesWiki: SQL Injection possible through public Bazar entry-listing APIs via numeric `query`/`queries` filters
CVE-2026-52770
### Summary YesWiki’s public Bazar entry-listing APIs are vulnerable to unauthenticated SQL injection in numeric `query`
YesWiki Vulnerable to Unauthenticated ActivityPub Signature-Verification Bypass via `!openssl_verify(...)` accepting `int(-1)`
CVE-2026-52767
## Summary `HttpSignatureService::verifySignature()` checks the result of PHP's `openssl_verify()` with a **loose boolea
YesWiki: SQL injection via the `recentchanges` action `period` argument leads to arbitrary DB read
CVE-2026-52763
### Summary The `recentchanges` action (`actions/recentchanges.php`) accepts a `period` argument from two disjoint para
YesWiki: Authenticated (Admin) Server-Side Template Injection to Remote Code Execution via Bazar Semantic Templates
CVE-2026-52762
### Summary YesWiki Bazar contains a stored Server-Side Template Injection (`SSTI`) vulnerability in the semantic templa
laravel-backup-restore has an OS Command Injection during database restore
CVE-2026-53932
## Summary A crafted backup archive can trigger OS command injection during database restore. The restore workflow extra
nebula-mesh: Host revocation is not durable - blocked/offboarded hosts can regain a valid certificate
CVE-2026-53602
## Summary Two related authorization gaps let a host that should no longer be trusted obtain a fresh, valid Nebula cert
A security vulnerability has been detected in YzmCMS up to 7.5. Affected is the function get_url...
CVE-2026-15202
A security vulnerability has been detected in YzmCMS up to 7.5. Affected is the function get_url of the file /yzmphp/yzm
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...