In the Linux kernel, the following vulnerability has been resolved: qede: sync udp_tunnel ports...
CVE-2026-74523
In the Linux kernel, the following vulnerability has been resolved: qede: sync udp_tunnel ports outside qede_lock in th
2026-08-16 归档
今日共收录 1655 条安全情报，包含 947 个 CVE，388 篇安全通告，以及 62 篇研究论文。
← 返回归档列表Fabric CA Developer's Guide: LDAP Injection via Unescaped Username in GetUser Filter
CVE-2026-53658
When fabric-ca is configured with an LDAP backend, the username from HTTP Basic authentication is included in an LDAP ui
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
多款Huawei路由器信息泄露漏洞
多款Huawei路由器信息泄露漏洞
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The v...
CVE-2026-19598
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization
The User Session Synchronizer plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.4.0. The `synchroni...
CVE-2026-15341
The User Session Synchronizer plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in
T-Reqs: HTTP Request Smuggling with Differential Fuzzing.
本文是首篇以系统化科学框架研究 HTTP 请求走私（HRS）攻击的学术工作。HRS 是一种利用代理-源站架构中两个服务器对 HTTP 请求解析差异的攻击手法，攻击者可将隐藏请求通过代理转发至后端服务器。尽管该攻击概念并不新颖，但近期新披露的
A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown function of the file /osrf-gateway-v1 of the component op...
CVE-2026-19926
CVE-2026-19926 是 Evergreen 图书馆系统中发现的一个 SQL 注入漏洞。该漏洞影响 Evergreen 3.14.11、3.15.11、3.16.5 以及 3.17-beta1 及更早版本。问题出在 /osrf-ga
A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function get_status of the component gRPC Management Interface. The manipul...
CVE-2026-19918
CVE-2026-19918 影响 SpaceX Starlink Router Gen 3（固件版本 2025.11.14.mr64708.3）。该漏洞位于设备的 gRPC 管理接口中，具体涉及 get_status 函数。由于该函数对访
Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive)...
CVE-2026-74767
Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting
SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji...
CVE-2026-73053
SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji function that fails to s
SiYuan versions before v3.7.4 fail to validate or escape the color field in attribute-view select...
CVE-2026-73050
SiYuan versions before v3.7.4 fail to validate or escape the color field in attribute-view select options, allowing stor
SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates...
CVE-2026-73052
SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly into option
SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth()...
CVE-2026-73046
SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth() middleware. The HTTP Basi
SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation,...
CVE-2026-73042
SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing stored values to ex
SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing...
CVE-2026-73044
SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting
SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template...
CVE-2026-73043
SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation operator, which
SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the...
CVE-2026-73041
SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the setFileAnnotation endp
The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to...
CVE-2026-18855
The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation