2026-07-12 归档

今日共收录 877 条安全情报,包含 71 个 CVE,468 篇安全通告,以及 78 篇研究论文。

← 返回归档列表
安全公告2026-07-12 发布INFO

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some...

CVE-2026-15473

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some unknown processing of th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-12 发布INFO

A weakness has been identified in MiniTool Partition Wizard up to 13.6. The affected element is...

CVE-2026-15475

A weakness has been identified in MiniTool Partition Wizard up to 13.6. The affected element is an unknown function in t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-12 发布INFO

A security flaw has been discovered in Eleveo Call Recording Software 9.7.0. Impacted is an...

CVE-2026-15474

A security flaw has been discovered in Eleveo Call Recording Software 9.7.0. Impacted is an unknown function of the file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-12 发布INFO

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is...

CVE-2026-15470

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functiona

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption...

CVE-2026-61861

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory alloca

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory...

CVE-2026-61870

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify...

CVE-2026-56372

ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allows attackers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

PraisonAI before 4.6.78 fails to validate file path references in custom command templates,...

CVE-2026-60088

PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The Grav Admin2 plugin (getgrav/grav-plugin-admin2) before 2.0.4 embeds a global JavaScript...

CVE-2026-61454

The Grav Admin2 plugin (getgrav/grav-plugin-admin2) before 2.0.4 embeds a global JavaScript variable window.__GRAV_CONFI

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces...

CVE-2026-61426

PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requireme

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization...

CVE-2026-61442

PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization on the PATCH routes for

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation...

CVE-2026-61465

ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed op

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null...

CVE-2026-61857

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP p

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the...

CVE-2026-61439

PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing...

CVE-2026-61428

PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attacke

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Hono before 4.12.7 allows __proto__ key in parseBody with dot option enabled, permitting...

CVE-2026-56763

Hono before 4.12.7 allows __proto__ key in parseBody with dot option enabled, permitting specially crafted form field na

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and...

CVE-2026-61858

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to mis

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Capgo before 12.128.2 contains an information disclosure vulnerability in the...

CVE-2026-56303

Capgo before 12.128.2 contains an information disclosure vulnerability in the find_apikey_by_value PostgreSQL function m

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_valid...

CVE-2026-56240

Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_valid calculation that allows o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Cap-go before 12.128.2 contains an information disclosure vulnerability in the public...

CVE-2026-56296

Cap-go before 12.128.2 contains an information disclosure vulnerability in the public.transfer_app RPC function that ret

历史摘要 · 未重新核验 · GitHub Advisory