2026-08-08 归档

今日共收录 1332 条安全情报,包含 443 个 CVE,483 篇安全通告,以及 115 篇研究论文。

← 返回归档列表
漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an unauthenticated attacker to create or write into existing files on the ...

CVE-2026-54208

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an unauthenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (“!ArcEntryMove”) accepts an arbitrary path, which can be set to network locations using UNC paths (e.g....

CVE-2026-54207

Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (“!ArcEntryMove”) accepts an arbitrary path, whi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network locations using UNC paths (e.g...

CVE-2026-54206

Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, wh

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_celink.htm) accepts a “pathname” parameter, which can be set to network locations using ...

CVE-2026-54205

Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_celink.htm) accepts a “pathname”

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter, which can be set to network locations using UNC paths (e.g., “\\Server\Sha...

CVE-2026-54204

Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter, which can be set t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows reading of sensitive information. When accessing the URL “/.well-known/mta-...

CVE-2026-54203

Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows reading of sensiti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive creation functionality. Because the archive path is user-controlled an...

CVE-2026-54202

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive creation funct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox does not enforce authentication or authorization checks when serving these log files. As a result, attackers can obtain sensitive err...

CVE-2026-54201

Tobit Laboratories AG TeamDavid's Webbox does not enforce authentication or authorization checks when serving these lo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an '@@attach' com...

CVE-2026-54200

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HTTP header injection through the request body in the application's link storing functionality (//ServerClient_celin...

CVE-2026-54199

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HTTP header injection through the request body in the applic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-supplied input, which is appended to the redirect target in a 302 HTTP response. By using ...

CVE-2026-12071

The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-supplied input, which is appended

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary file deletion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an @@COMMENT...

CVE-2026-12070

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary file deletion vulnerability in the send email,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placin...

CVE-2026-9169

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal...

CVE-2026-66493

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulne...

CVE-2026-66492

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerab...

CVE-2026-66491

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the g

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the d...

CVE-2026-49008

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially cr...

CVE-2026-18938

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface.

CVE-2026-49007

By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission.

CVE-2026-49006

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmiss

历史摘要 · 未重新核验 · NVD