trasgoDP: An Open Source Framework for Releasing Noised Tabular Microdata under Local Differential Privacy
该论文介绍了trasgoDP，一个模块化、开源且易于使用的Python框架，用于在ε-本地差分隐私（LDP）保证下发布表格微观数据，以及在地理不可区分性假设下发布位置数据。该框架设计为可以安装并集成到标准数据科学工作流中，支持系统地探索多种
2026-07-28 归档
今日共收录 1224 条安全情报，包含 453 个 CVE，382 篇安全通告，以及 98 篇研究论文。
← 返回归档列表Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.
CVE-2026-65447
CVE-2026-65447 是 Contest Gallery 插件（版本 <= 30.0.6）中的一个未认证跨站脚本（XSS）漏洞。该漏洞允许未经身份验证的攻击者利用特制请求，在用户浏览器中执行任意 JavaScript 代码。攻击者需
Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
CVE-2026-65446
CVE-2026-65446 是一个存在于 Kali Forms 插件（版本 ≤ 2.4.18）中的未认证跨站脚本（XSS）漏洞。该漏洞允许未经身份验证的攻击者通过构造恶意输入，在受影响站点的上下文中执行任意 JavaScript 代码，从
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.
CVE-2026-65441
GiveWP 是一个广泛使用的 WordPress 捐赠插件，用于在线筹款和捐赠管理。其版本 4.16.3 及更早版本中存在一个未经认证的跨站脚本（XSS）漏洞，CVSS 评分为 7.1，攻击复杂度低，无需任何权限即可触发。该漏洞源于对用户
Unauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions.
CVE-2026-65440
GetGenie 是一个用于 WordPress 等平台的内容生成插件。CVE-2026-65440 影响 GetGenie 4.4.3 及更早版本，是一个未经认证的跨站脚本（XSS）漏洞。攻击者可以在无需认证的情况下，通过精心构造的请求向
Unauthenticated Cross Site Scripting (XSS) in Message Filter for Contact Form 7 <= 1.6.3.9 versions.
CVE-2026-65438
Contact Form 7 是一款流行的WordPress联系表单插件。其子插件 Message Filter 在版本 1.6.3.9 及以下存在未经验证的跨站脚本(XSS)漏洞。攻击者可以在表单消息中注入恶意脚本，当管理员或其他用户查看
Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.
CVE-2026-61957
该漏洞影响 miniorange otp verification 插件版本 <= 5.5.1，属于未认证的跨站脚本（XSS）漏洞。攻击者无需身份认证即可利用，通过构造恶意请求，在用户浏览器中执行任意脚本，可能导致会话劫持、钓鱼攻击或敏感信
An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request.
CVE-2026-51564
An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external
An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the file_manage_control.php component
CVE-2026-51078
An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the fil
SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the sys_sql_query.php component
CVE-2026-51077
SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlqu
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-limiting feature to minimize a brute-force attack. This p...
CVE-2021-32088
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The kbftp account has a password of getbxf, which i...
CVE-2021-32087
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credent
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a hardcoded symmetric encryption key to encrypt secrets in the MySQL databases. (This ...
CVE-2021-32086
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a hardcoded symmetric encrypt
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The report and R1 MySQL accounts have a password of...
CVE-2021-32085
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credent
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. If a customer restricts access to the web console by IP address or subnets, the API endpoints ...
CVE-2021-32084
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. If a customer restricts access to the
A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the serialized capture tree directly into an inline JavaScri...
CVE-2026-66824
A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6...
CVE-2026-64783
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and i
The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel me...
CVE-2026-64776
The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, m
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Taho...
CVE-2026-64775
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, t...
CVE-2026-64774
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS