PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
2026-08-12 归档
今日共收录 1910 条安全情报，包含 1065 个 CVE，437 篇安全通告，以及 97 篇研究论文。
← 返回归档列表Acknowledgements
Acknowledgements
多款Huawei路由器信息泄露漏洞
多款Huawei路由器信息泄露漏洞
Saturn: Host-Gadget Synergistic USB Driver Fuzzing.
本文提出了一种名为 Saturn 的主机-设备协同 USB 驱动模糊测试方法。USB 是现代操作系统的重要组成部分，其协议栈通常包含主机侧驱动和设备侧 gadget 驱动，两者均运行在特权模式，安全关键性极高。一旦这些驱动存在漏洞，恶意或异
Firewall for AI
Firewall for AI
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks
Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting criti
The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by...
CVE-2026-67558
The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by performing a substring match aga
The Mira cloud API accepts the firmware version reported by the companion app as authoritative...
CVE-2026-64934
The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, witho
The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP...
CVE-2026-66340
The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throttling, or account lockout
libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend (USE_SSH=libssh2)...
CVE-2026-5917
libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command inj
When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's...
CVE-2026-66832
When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's live session token is app
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service...
CVE-2026-66147
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission...
CVE-2026-19550
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rath
DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote...
CVE-2026-73034
DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary f
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers...
CVE-2026-73031
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary J
When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that...
CVE-2026-65655
When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to
A flaw was found in insights-client. When the application receives a non-200 response, it logs...
CVE-2026-71474
A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, whic
Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044...
CVE-2026-66146
Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions
PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers...
CVE-2026-73032
PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary Jav
The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to...
CVE-2026-16230
The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path vali