2026-08-12 归档

今日共收录 1910 条安全情报，包含 1065 个 CVE，437 篇安全通告，以及 97 篇研究论文。

← 返回归档列表

漏洞预警2026-08-11 发布INFO

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traff...

CVE-2026-11739

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-11 发布INFO

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification t...

CVE-2026-11737

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-11 发布INFO

A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.

CVE-2026-11734

A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected de

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-08-11 发布INFO

A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.

CVE-2026-11733

A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-08-11 发布INFO

Fooocus is an image generating software. In versions 2.5.5 and prior, the Fooocus web UI is vulnerable to remote code execution due to the unsafe use of eval when processing met...

CVE-2025-31114

Fooocus is an image generating software. In versions 2.5.5 and prior, the Fooocus web UI is vulnerable to remote code ex

历史摘要 · 未重新核验 · NVD

#cve #cwe-95

漏洞预警2026-08-11 发布INFO

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer...

CVE-2026-73066

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesse

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-08-11 发布INFO

SWC is a TypeScript / JavaScript compiler written in Rust. Prior to @swc/html 1.15.47-nightly-20260729.1 and swc_html_minifier 59.0.0, the minifyJson processing in crates/swc_ht...

CVE-2026-72925

SWC is a TypeScript / JavaScript compiler written in Rust. Prior to @swc/html 1.15.47-nightly-20260729.1 and swc_html_mi

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-116

漏洞预警2026-08-11 发布INFO

SeaweedFS is a distributed storage system. Prior to 4.24, the weed/server/filer_server_handlers.go allowed_prefixes authorization check used strings.HasPrefix on raw path string...

CVE-2026-72921

SeaweedFS is a distributed storage system. Prior to 4.24, the weed/server/filer_server_handlers.go allowed_prefixes auth

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-08-11 发布INFO

TypeBot is a chatbot builder tool. In version 3.16.1, API tokens (bearer credentials used to authenticate against the builder API) are stored in the database as cleartext string...

CVE-2026-47702

TypeBot is a chatbot builder tool. In version 3.16.1, API tokens (bearer credentials used to authenticate against the bu

历史摘要 · 未重新核验 · NVD

#cve #cwe-312

漏洞预警2026-08-11 发布INFO

Velociraptor allows multi-tenant deployments named "Orgs". By default Velociraptor, uses the ROOT org, but users can create child orgs for other tenants within the same deploym...

CVE-2026-18860

Velociraptor allows multi-tenant deployments named "Orgs". By default Velociraptor, uses the ROOT org, but users can cr

历史摘要 · 未重新核验 · NVD

#cve #cwe-280

漏洞预警2026-08-11 发布INFO

The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the r...

CVE-2026-18636

The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users fr

历史摘要 · 未重新核验 · NVD

#cve #cwe-288

漏洞预警2026-08-11 发布INFO

Velociraptor's VQL has a query() plugin which allows running a VQL query in a different org or user context. To be able to run as a different user, the calling user needs to hav...

CVE-2026-18635

Velociraptor's VQL has a query() plugin which allows running a VQL query in a different org or user context. To be able

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-08-11 发布INFO

Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS images. Typically Velociraptor...

CVE-2026-17535

Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-369 #cwe-789

漏洞预警2026-08-11 发布INFO