2026-08-08 归档

今日共收录 1332 条安全情报，包含 443 个 CVE，483 篇安全通告，以及 115 篇研究论文。

漏洞预警2026-08-06 发布INFO

A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0. Impacted is an unknown function of the file view_students.php. Such manipul...

CVE-2026-19066

A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0. Impacted is an unk

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639

漏洞预警2026-08-06 发布INFO

A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects some unknown processing of the file upload_files.php. Th...

CVE-2026-19065

A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-08-06 发布INFO

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation ...

CVE-2026-19064

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affe

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639

漏洞预警2026-08-06 发布INFO

A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipula...

CVE-2026-19062

A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unkn

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-06 发布INFO

A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulation leads to code injection. The attack needs to be perfo...

CVE-2026-19060

A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulat

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-94

漏洞预警2026-08-06 发布INFO

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. This affects the function read of the file metagpt/tools/libs/editor.py. This manipulation causes path tr...

CVE-2026-19059

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. This affects the function read of the file metag

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-06 发布INFO

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter of the file metagpt/roles/di/data_interpreter.py. The man...

CVE-2026-19058

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-94

漏洞预警2026-08-06 发布INFO

A vulnerability was detected in Lspace-io lspace-server up to 79f02fe5aa8970b210a6a05cf097155f8d9ffd71. This issue affects the function fileExists/readFile/writeFile/deleteFile ...

CVE-2026-19054

A vulnerability was detected in Lspace-io lspace-server up to 79f02fe5aa8970b210a6a05cf097155f8d9ffd71. This issue affec

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-06 发布INFO

A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially cra...

CVE-2026-18487

A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name s

历史摘要 · 未重新核验 · NVD

#cve #cwe-451

漏洞预警2026-08-06 发布INFO

The WPC Name Your Price for WooCommerce WordPress plugin before 2.2.5 does not enforce its server-side price allowlist for products configured in "Select" price mode, allowing a...

CVE-2026-16620

The WPC Name Your Price for WooCommerce WordPress plugin before 2.2.5 does not enforce its server-side price allowlist f

历史摘要 · 未重新核验 · NVD

#cve #cwe-472

漏洞预警2026-08-06 发布INFO

The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly limit the number of second-factor verification attempts, tracking them against a client-supplied identifier t...

CVE-2026-16619

The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly limit the number of second-factor verification attem

历史摘要 · 未重新核验 · NVD

#cve #cwe-307

漏洞预警2026-08-06 发布INFO

The Event Booking Manager for WooCommerce (Pro) WordPress plugin before 5.0.3 does not validate the ticket price on the server during its native (non-WooCommerce) checkout, trus...

CVE-2026-16067

The Event Booking Manager for WooCommerce (Pro) WordPress plugin before 5.0.3 does not validate the ticket price on the

历史摘要 · 未重新核验 · NVD

#cve #cwe-472

漏洞预警2026-08-06 发布INFO

The Ninja Forms WordPress plugin before 3.14.10 does not prevent user-supplied query-string input, used to pre-populate a form field's default value, from being processed as a s...

CVE-2026-15256

The Ninja Forms WordPress plugin before 3.14.10 does not prevent user-supplied query-string input, used to pre-populate

历史摘要 · 未重新核验 · NVD

#cve #cwe-74

漏洞预警2026-08-06 发布INFO

The RegistrationMagic WordPress plugin before 6.0.9.5 does not compare the verified PayPal capture's amount, currency, payee, or prior use against the registration it is finalis...

CVE-2026-15208

The RegistrationMagic WordPress plugin before 6.0.9.5 does not compare the verified PayPal capture's amount, currency, p

历史摘要 · 未重新核验 · NVD

#cve #cwe-345

漏洞预警2026-08-06 发布INFO

The WP Hotel Booking WordPress plugin before 2.3.2 does not verify that a payment notification corresponds to a payment made to the site's own merchant account, nor that the pai...

CVE-2026-15152

The WP Hotel Booking WordPress plugin before 2.3.2 does not verify that a payment notification corresponds to a payment

历史摘要 · 未重新核验 · NVD

#cve #cwe-345

漏洞预警2026-08-06 发布INFO

The WP Hotel Booking WordPress plugin before 2.3.3 does not ensure that room quantities and the resulting order total are non-negative when placing a booking, and relies on clie...

CVE-2026-15149

The WP Hotel Booking WordPress plugin before 2.3.3 does not ensure that room quantities and the resulting order total ar

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-472

漏洞预警2026-08-06 发布INFO

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming payment notifications, failing to validate the payment recipien...

CVE-2026-15147

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming paymen

历史摘要 · 未重新核验 · NVD

#cve #cwe-345 #cwe-639

漏洞预警2026-08-06 发布INFO

The Simple Membership WordPress plugin before 4.7.7 does not verify that a PayPal payment notification was sent to the site's own configured merchant account before activating a...

CVE-2026-14936

The Simple Membership WordPress plugin before 4.7.7 does not verify that a PayPal payment notification was sent to the s

历史摘要 · 未重新核验 · NVD

#cve #cwe-345

漏洞预警2026-08-06 发布INFO

The Events Made Easy WordPress plugin before 3.1.2 does not bind the payment authorization token to the payment record being charged, allowing unauthenticated attackers to pay a...

CVE-2026-14842

The Events Made Easy WordPress plugin before 3.1.2 does not bind the payment authorization token to the payment record b

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-06 发布INFO

The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bookable product's configured minimum booking duration on the server side when adding to cart and calculatin...

CVE-2026-14831

The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bookable product's configured minimum booking durat

历史摘要 · 未重新核验 · NVD

#cve #cwe-602