2026-08-08 归档

今日共收录 1332 条安全情报，包含 443 个 CVE，483 篇安全通告，以及 115 篇研究论文。

← 返回归档列表

漏洞预警2026-08-07 发布INFO

A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access sessions, data, and endpoints of another...

CVE-2026-37171

A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-08-07 发布INFO

A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiver_stopThreadless of the file src/sampled_values/sv_subscriber.c ...

CVE-2026-19206

A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiver_stopT

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-122

漏洞预警2026-08-07 发布INFO

OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to att...

CVE-2026-16637

OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlis

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-07 发布INFO

An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron1...

CVE-2026-15570

An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE245

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-07 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex allows SQL Injection via the :comment option of Postgr...

CVE-2026-66838

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgr

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-07 发布INFO

Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0 - An unauthenticated attacker can store malicious JavaScript in a J...

CVE-2026-66494

Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0 - An unaut

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-284

漏洞预警2026-08-07 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentiall...

CVE-2026-56794

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A lo

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-08-07 发布INFO

The ShareOpenly WordPress plugin prior to version 1.2.1 contains a Cross-Site Scripting vulnerability caused by the absence of WordPress's `esc_url()` escaping function on the `...

CVE-2026-48094

The ShareOpenly WordPress plugin prior to version 1.2.1 contains a Cross-Site Scripting vulnerability caused by the abse

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-07 发布INFO

A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting ...

CVE-2026-15816

A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-07 发布INFO

Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malf...

CVE-2026-71559

Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a de

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-08-07 发布INFO

Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally in David, passwords are stored in various files using o...

CVE-2026-54218

Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally

历史摘要 · 未重新核验 · NVD

#cve #cwe-321

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send an email containing malicious JavaScript code. When a us...

CVE-2026-54217

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scripting (XSS) vulnerability. By sending a specially crafted link including an arbitrary ...

CVE-2026-54216

Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scripting (XSS) vulnerability. By

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl” parameter. An attacker can exploit this vulnerability to craft a URL withi...

CVE-2026-54215

Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl” parameter. An atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to HTTP header injection through the “cType” URL parameter, which allows arbitrary modification of the Conte...

CVE-2026-54214

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to HTTP header injection through the “cType” URL par

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint (/internalRestart) is accessed. Thi...

CVE-2026-54213

Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down whe

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox application implements an API endpoint that is vulnerable to a buffer overflow condition. By submitting a specially crafted JSON body, ...

CVE-2026-54212

Tobit Laboratories AG TeamDavid's Webbox application implements an API endpoint that is vulnerable to a buffer overflow

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox application’s endpoint “//serverClient_close.html” is vulnerable to a buffer overflow vulnerability in multiple form data parameters. B...

CVE-2026-54211

Tobit Laboratories AG TeamDavid's Webbox application’s endpoint “//serverClient_close.html” is vulnerable to a buffer o

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox application implements various file upload functionalities that are vulnerable to a buffer overflow condition. By specifying an excessi...

CVE-2026-54210

Tobit Laboratories AG TeamDavid's Webbox application implements various file upload functionalities that are vulnerable

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox application handles password changes using a function triggered by including the string "(editini)" in the file path, writing the new ...

CVE-2026-54209

Tobit Laboratories AG TeamDavid's Webbox application handles password changes using a function triggered by including t

历史摘要 · 未重新核验 · NVD

#cve #cwe-125