The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing unauthenticated attackers to bypass the API authentication via type j...

CVE-2026-16269

The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing unauthentica

历史摘要 · 未重新核验 · NVD

The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when unserialising a value taken from a public form submission, allowing unauthenticated attac...

CVE-2026-16267

The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when unserialising a value taken from

历史摘要 · 未重新核验 · NVD

The Easy Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'accordionTitleTag' block attribute in versions up to, and including, 3.1.8. This is...

CVE-2026-18988

The Easy Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'accordionTitleTag' block a

历史摘要 · 未重新核验 · NVD

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic comple...

CVE-2026-71848

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the langua

历史摘要 · 未重新核验 · NVD

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggre...

CVE-2026-56818

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the Redis

历史摘要 · 未重新核验 · NVD

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execut...

CVE-2026-68772

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attacke

历史摘要 · 未重新核验 · NVD

A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WTSTradeDef.hpp of the component TraderATP Cash Trade Conve...

CVE-2026-19212

A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WT

历史摘要 · 未重新核验 · NVD

Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account holding the nexus:selectors:create permission could construct an expression that ...

CVE-2026-17595

Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account holding the nexus:select

历史摘要 · 未重新核验 · NVD

An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent nexus:settings permission in the legacy Nexus Repository 2) could submit arbitra...

CVE-2026-17593

An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent nexus:settings permissi

历史摘要 · 未重新核验 · NVD

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain rol...

CVE-2026-14644

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with

历史摘要 · 未重新核验 · NVD

Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, a field-level permissions bypass exposes restricted DocType fields. This issue is fixed in versi...

CVE-2026-66059

Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, a field-level permissions bypass expose

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. T...

CVE-2026-19207

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some

历史摘要 · 未重新核验 · NVD

决赛直播｜第四届阿里CTF安全挑战赛

该文章为第四届阿里CTF安全挑战赛的决赛直播信息，发布在先知社区。文章内容可能涉及比赛进程、赛题设计或参赛队伍表现。作为网络安全社区活动，CTF比赛旨在通过模拟攻防实战提升参与者的安全技能，涵盖Web渗透、逆向工程、二进制漏洞利用、密码学等

历史摘要 · 未重新核验 · 先知社区

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

本文为阿里云先知社区发布的一篇招聘启事，主题为'阿里云2027届实习生招聘'，目标人群是面向2027届毕业的学生。文中强调'抢先加入AI时代顶尖安全团队'，即阿里云安全团队正在招募实习生，并突出人工智能时代的安全研究与实践机会。文章未提供任

历史摘要 · 未重新核验 · 先知社区

Control CenterManage your security and delivery services

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

See all Cybersecurity

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

Our Infrastructure

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

OpenClaw安全使用实践指南

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

关于OpenClaw安全应用的风险提示

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT

关于“独狼”团伙大规模传播恶意程序的风险提示

关于“独狼”团伙大规模传播恶意程序的风险提示

历史摘要 · 未重新核验 · CNCERT