2026-07-12 归档

今日共收录 877 条安全情报，包含 71 个 CVE，468 篇安全通告，以及 78 篇研究论文。

← 返回归档列表

漏洞预警2026-07-11 发布INFO

The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local File Inclusion in all versions up to, and including, 3.0....

CVE-2026-3576

The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-11 发布INFO

The SurfLink - Ultimate Link Manager plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the ajax_import_410() function in ...

CVE-2026-3552

The SurfLink - Ultimate Link Manager plugin for WordPress is vulnerable to unauthorized data modification due to a missi

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-07-11 发布INFO

The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a flawed file type validation bypass in the `upload_extension_files()` function in al...

CVE-2026-2354

The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a flawed file type validatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-07-11 发布INFO

The Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form Parameter (form<N>) in all versions up to, and including, 1.7.20 due to insuffic...

CVE-2026-15335

The Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form Parameter (form) in all

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-11 发布INFO

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'height_slider' Slider Module Field in all versions up to, and including, 7.7.6 due to ...

CVE-2026-15097

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'height_slider' Slider Module

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-11 发布INFO

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Map Module 'b_width_map' Field in all versions up to, and including, 7.7.6 due to insuf...

CVE-2026-15096

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Map Module 'b_width_map' Field

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-11 发布INFO

The Simple JWT Login – Allows you to use JWT on REST endpoints. plugin for WordPress is vulnerable to Authentication Bypass to Privilege Escalation in all versions up to, and in...

CVE-2026-14262

The Simple JWT Login – Allows you to use JWT on REST endpoints. plugin for WordPress is vulnerable to Authentication Byp

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-07-11 发布INFO

The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.3. This is due to the plugin not properly verifying that a ...

CVE-2026-13250

The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.3.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-07-11 发布INFO

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.14.0 via the gene...

CVE-2026-13116

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-07-11 发布INFO

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premium_tooltip_text' parame...

CVE-2026-12141

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored C

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-11 发布INFO

The Starboard Suite Reservation Calendars plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in the [starboard-suite-lightbox] shortcode ...

CVE-2025-13968

The Starboard Suite Reservation Calendars plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcod

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

威胁情报2026-07-12 发布INFO

决赛直播｜第四届阿里CTF安全挑战赛

第四届阿里CTF安全挑战赛决赛于2026年7月12日在先知社区进行直播。该赛事由阿里巴巴主办，旨在通过实战化的网络安全竞赛，提升参赛者的攻防技能和安全意识。比赛内容涵盖Web安全、二进制安全、逆向工程、密码学等多个方向，题目设计贴近真实世界

历史摘要 · 未重新核验 · 先知社区

#xianzhi #research #community

威胁情报2026-07-12 发布INFO

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

该文章为阿里云2027届实习生招聘公告，发布在先知社区。内容主要介绍招聘岗位、要求及报名方式，未涉及任何安全威胁、漏洞、攻击活动或安全研究。文章属于企业招聘信息，与威胁情报无关。

历史摘要 · 未重新核验 · 先知社区

#xianzhi #research #community

威胁情报2026-07-12 发布INFO

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #botnet #ddos

威胁情报2026-07-12 发布INFO

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #botnet #ddos

威胁情报2026-07-12 发布INFO

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #botnet #ddos

威胁情报2026-07-12 发布INFO

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

#report #government #cncert

威胁情报2026-07-12 发布INFO

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT

#report #government #cncert

威胁情报2026-07-12 发布INFO

关于“独狼”团伙大规模传播恶意程序的风险提示

历史摘要 · 未重新核验 · CNCERT

#report #government #cncert

威胁情报2026-07-12 发布INFO

关于RCtea僵尸网络大范围传播的风险提示

历史摘要 · 未重新核验 · CNCERT

#report #government #cncert