APSB26-123: Security update available for Adobe Campaign Classic
APSB26-123: Security update available for Adobe Campaign Classic
2026-08-14 归档
今日共收录 1589 条安全情报，包含 784 个 CVE，406 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Early Stable Update for Desktop
The Stable channel has been updated to 152.0.7977.42/.43 for Windows and Mac as part of our early stable release to a sm
Chrome Beta for Desktop Update
The Beta channel has been updated to 152.0.7977.42 for Windows, Mac and Linux.A partial list of changes is available in
PAN-SA-2026-0011 Chromium: Monthly Vulnerability Update (August 2026) (Severity: HIGH)
PAN-SA-2026-0011 Chromium: Monthly Vulnerability Update (August 2026) (Severity: HIGH)
【智能体开发平台 ADP】关于 youtu-mrc-standard 模型升级及切换安排的公告
【智能体开发平台 ADP】关于 youtu-mrc-standard 模型升级及切换安排的公告
【大模型服务平台 TokenHub】关于 Token Plan 个人版套餐用量抵扣机制调整的通知
【大模型服务平台 TokenHub】关于 Token Plan 个人版套餐用量抵扣机制调整的通知
【腾讯云认证】腾讯云架构高级工程师认证升级公告
【腾讯云认证】腾讯云架构高级工程师认证升级公告
Chrome Dev for Desktop Update
The Dev channel has been updated to 153.0.8003.0 for Windows, Mac and Linux.A partial list of changes is available in th
Critical Security Patch Update - August 2026 - Pre-Release Announcement
Critical Security Patch Update - August 2026 - Pre-Release Announcement
Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs
该论文重新审视了视觉语言模型（VLM）后门攻击的威胁模型，指出传统后门被视为静态漏洞，即在一对一或N对N攻击中，攻击者在训练前将有限数量的触发器绑定到固定目标集，这种假设严重低估了实际风险。作者提出一种可编程后门攻击范式：仅需一次投毒阶段，
A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save_cargo_type. Executing a ...
CVE-2026-19787
CVE-2026-19787 是 SourceCodester Air Cargo Management System 1.0 中存在的一个 SQL 注入漏洞。该漏洞影响文件 /classes/Master.php 中的 save_carg
A vulnerability was found in francoisjacquet RosarioSIS up to 12.8. This issue affects some unknown processing of the file Modules.php. Performing a manipulation results in cros...
CVE-2026-19786
CVE-2026-19786 是 francoisjacquet 开发的 RosarioSIS 学生信息管理系统中发现的一个跨站请求伪造 (CSRF) 漏洞，影响版本直至 12.8。漏洞位于 Modules.php 文件的未知处理逻辑中，攻
A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the c...
CVE-2026-19785
CVE-2026-19785 是 RosarioSIS（学校管理信息系统）中 Student Medical Module 组件存在的一个 SQL 注入漏洞，影响版本为 12.7.4 及之前。漏洞位于 modules/Students/in
A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes authorization b...
CVE-2026-19784
RosarioSIS 是一款开源的学校管理信息系统。在12.8及之前版本中，文件 Discipline/Referrals.php 的 DBUpdate 函数存在授权绕过漏洞（CVE-2026-19784）。该漏洞源于对数据库更新操作的授权
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient inp...
CVE-2026-18109
该漏洞影响WordPress缓存插件W3 Total Cache至2.10.3版本（含），属于存储型跨站脚本（XSS）。漏洞根因在于插件对评论者姓名的输入过滤和输出转义不充分。当启用'lazy load images'（图片懒加载）功能时，
A vulnerability was identified in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such man...
CVE-2026-19771
CVE-2026-19771 是针对 Baicells EG3661M 路由器（固件版本 BaiCE_BQ6_2.0.5.3_NA）中 LuCI Web 接口组件所发现的一个安全漏洞。该漏洞位于 /cgi-bin/luci 文件中，攻击者可
A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of th...
CVE-2026-19770
CVE-2026-19770 是影响 feedmob fm-mcp-servers 0.0.3 的一个服务端请求伪造（SSRF）漏洞。该漏洞存在于 smadex-reporting 组件的下载端点中，具体位于 src/smadex-repo
A weakness has been identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. Executing a manipula...
CVE-2026-19767
CVE-2026-19767 是影响 itsourcecode Hospital Management System 1.0 的一个已公开的 SQL 注入漏洞。该漏洞位于 viewdoctortimings.php 文件中，攻击者可以通过操
A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of the file src...
CVE-2026-19765
该漏洞影响 eyaushev/swagger-testcase-mcp 项目在提交 5babb27c951fb404bc2b25ec80593616e49054e5 中的代码。具体问题位于 src/utils/swagger-parser.
A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Su...
CVE-2026-19764
CVE-2026-19764是Raisecom通信指挥调度管理平台（版本7.6.5及之前）中的一个SQL注入漏洞。漏洞位于/app/users/getpwd.php文件中，攻击者通过构造sip参数，可以在未认证的情况下远程发起攻击，导致SQ