Grafana认证后DuckDB-SQL注入漏洞(CVE-2024-9264)
CVE-2024-9264
Grafana认证后DuckDB-SQL注入漏洞(CVE-2024-9264)
2026-07-23 归档
今日共收录 1422 条安全情报，包含 546 个 CVE，469 篇安全通告，以及 113 篇研究论文。
← 返回归档列表SPIP BigUp Unauthenticated RCE(CVE-2024-8517)
CVE-2024-8517
SPIP BigUp Unauthenticated RCE(CVE-2024-8517)
Rejetto HFS 远程命令执行漏洞(CVE-2024-39943)
CVE-2024-39943
Rejetto HFS 远程命令执行漏洞(CVE-2024-39943)
Apache HugeGraph-Server Command Execution In Gremlin（CVE-2024-27348）
CVE-2024-27348
Apache HugeGraph-Server Command Execution In Gremlin（CVE-2024-27348）
Zabbix 后台延时注入(CVE-2024-22120)
CVE-2024-22120
Zabbix 后台延时注入(CVE-2024-22120)
CrushFTP 认证绕过漏洞（CVE-2024-4040）
CVE-2024-4040
CrushFTP 认证绕过漏洞（CVE-2024-4040）
Alert for CVE-2026-21992
CVE-2026-21992
Alert for CVE-2026-21992
Alert for CVE-2025-61884
CVE-2025-61884
Alert for CVE-2025-61884
Alert for CVE-2025-61882
CVE-2025-61882
Alert for CVE-2025-61882
Alert for CVE-2024-21287
CVE-2024-21287
Alert for CVE-2024-21287
Alert for CVE-2022-21500
CVE-2022-21500
Alert for CVE-2022-21500
Alert for CVE-2021-44228
CVE-2021-44228
Alert for CVE-2021-44228
Linux 内核提权 CVE-2026-31431(copy-fail)
CVE-2026-31431
Linux 内核提权 CVE-2026-31431(copy-fail)
Alert for CVE-2026-35273
CVE-2026-35273
Alert for CVE-2026-35273
【安全通告】WordPress "wp2shell" 远程代码执行漏洞风险通告（CVE-2026-63030, CVE-2026-60137）
CVE-2026-63030 · CVE-2026-60137
【安全通告】WordPress "wp2shell" 远程代码执行漏洞风险通告（CVE-2026-63030, CVE-2026-60137）
Stable Channel Update for Desktop
CVE-2026-16417 · CVE-2026-16423 · CVE-2026-16418 · CVE-2026-16416 · CVE-2026-16413 · CVE-2026-16420 · CVE-2026-16414 · CVE-2026-16424 · CVE-2026-16422 · CVE-2026-16419 · CVE-2026-16415 · CVE-2026-16421
The Stable channel has been updated to 150.0.7871.181/.182 for Windows and Mac and 150.0.7871.181 for Linux, which will
JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab
JupyterLab's image viewer allows for cross-site scripting (XSS) when a specially-crafted image file is opened through th
n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service
## Impact An authenticated user able to create or edit a workflow expression could abuse the expression engine's array-
n8n: Authenticated code execution in the n8n Git node
## Impact Authenticated n8n users with rights to create and execute workflows could achieve code execution on the n8n h
When HTTP 402 Meets the Blockchain: Risks on Emerging x402 Payments
x402 是一种新兴的 Web API 和自主 AI 智能体支付协议，扩展了 HTTP 402 状态码，引入支付协商流程，并将支付证明验证和链上结算委托给第三方协调器（facilitators）。这种设计将信任和验证集中在一个组件上，导致单