SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting injection into style attributes. Attackers can inject ma...

CVE-2026-73044

SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting

历史摘要 · 未重新核验 · NVD

SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation operator, which renders user-authored Go templates and stores output verb...

CVE-2026-73043

SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation operator, which

历史摘要 · 未重新核验 · NVD

SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing stored values to execute script when users open group, view, or field-edit m...

CVE-2026-73042

SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing stored values to ex

历史摘要 · 未重新核验 · NVD

SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the setFileAnnotation endpoint. Attackers can inject malicious markup into annotati...

CVE-2026-73041

SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the setFileAnnotation endp

历史摘要 · 未重新核验 · NVD

The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ll_delete_link_fields function in all versions up ...

CVE-2026-18855

The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation

历史摘要 · 未重新核验 · NVD

The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and including, 1.2.6. This is due to the add_front_user_update() AJAX handler being ...

CVE-2026-16142

The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and including, 1.2.6. This

历史摘要 · 未重新核验 · NVD

The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppb_log_in_...

CVE-2026-15826

The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up t

历史摘要 · 未重新核验 · NVD

The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.27.0. This is due to the six_storage_create_wp_user() AJAX h...

CVE-2026-15303

The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.27.

历史摘要 · 未重新核验 · NVD

The RapiSafe – Secure Multi File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handleAj...

CVE-2026-14484

The RapiSafe – Secure Multi File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion

历史摘要 · 未重新核验 · NVD

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying ope...

CVE-2026-19682

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this

历史摘要 · 未重新核验 · NVD

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially craft...

CVE-2026-19681

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacke

历史摘要 · 未重新核验 · NVD

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by ...

CVE-2026-19626

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authentica

历史摘要 · 未重新核验 · NVD

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

历史摘要 · 未重新核验 · CNCERT

InSPECtor: Improving SLEIGH Processor Specification Veracity via Proxy

该论文关注处理器规范（processor specifications）的正确性问题，这些规范是反汇编器、反编译器和模拟器等关键安全与分析工具的基础。然而，此类规范的正确性很少被系统验证，其中的错误会扭曲程序行为、掩盖漏洞，并可能被利用来规

历史摘要 · 未重新核验 · arXiv cs.CR

京公网安备 11000002002063号

该条目来自 360CERT 安全报告，标题为“京公网安备 11000002002063号”，其来源链接指向公安备案查询系统。但由于正文摘要为空，无法获知具体攻击活动、技术细节或影响范围。仅能确认相关标签包含 apt、360、malware

历史摘要 · 未重新核验 · 360CERT 安全报告

（总）网出证（京）字第281号

该输入记录来自 360CERT 安全报告，但标题为“（总）网出证（京）字第281号”，这实际是一个网络出版服务许可证编号，并非典型的威胁情报标题。来源 URL 直接指向 360 官网的许可证展示页面，而非任何具体的分析报告或通报内容。输入的

历史摘要 · 未重新核验 · 360CERT 安全报告

京ICP证080047号[京ICP备08010314号-6]

本次输入的情报条目来自360CERT安全报告，但数据存在异常。标题为'京ICP证080047号[京备08010314号-6]'，该格式是中国工信部ICP备案号，源链接指向beian.miit.gov.cn（工信部备案查询系统），并非通常的安

历史摘要 · 未重新核验 · 360CERT 安全报告

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=delete_supplier. The man...

CVE-2026-19925

CVE-2026-19925 是 SourceCodester Stock Management System 1.0 中存在的一个 SQL 注入漏洞。该漏洞位于 /classes/Master.php 文件的 delete_supplie

历史摘要 · 未重新核验 · NVD

A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkout_process.php. Executing a manipulation of the argum...

CVE-2026-19923

CVE-2026-19923 是 code-projects Online Shopping System 1.0 中 /checkout_process.php 文件存在的一个 SQL 注入漏洞。该漏洞源于对参数 total_count

历史摘要 · 未重新核验 · NVD