An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files...
CVE-2026-67926
An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI
2026-08-18 归档
今日共收录 810 条安全情报，包含 28 个 CVE，396 篇安全通告，以及 98 篇研究论文。
← 返回归档列表An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via...
CVE-2026-67965
An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login funct
Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute...
CVE-2026-67925
Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the endpo
Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to...
CVE-2026-39255
Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via
Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to...
CVE-2026-67966
Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemo
An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service...
CVE-2026-68005
An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request he
A flaw was found in search-v2-operator. This component's `search-serviceaccount` has overly broad...
CVE-2026-70495
A flaw was found in search-v2-operator. This component's `search-serviceaccount` has overly broad permissions, allowing
A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function...
CVE-2026-75013
A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function setWizardCfg of the fi
An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute...
CVE-2026-68004
An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP pub
A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by...
CVE-2026-75012
A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by this issue is the func
Packer up to 1.15.4 is vulnerable to an issue in the third-party plugin installer that may allow...
CVE-2026-19589
Packer up to 1.15.4 is vulnerable to an issue in the third-party plugin installer that may allow unintended file system
Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite
CVE-2026-59903
### Summary Netty's `CorsHandler` silently overwrites existing `Vary` headers, enabling cache poisoning and sensitive in
Netty: Memory Exhaustion in SctpMessageCompletionHandler
CVE-2026-59902
### Summary SctpMessageCompletionHandler does not limit the total size of buffered fragments, allowing an unauthenticate
sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)
CVE-2026-59893
### Summary sqlparse contains a Regular Expression Denial of Service (ReDoS) vulnerability in its dollar-quoted SQL lit
sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger
CVE-2026-54284
### Summary `sqlparse` ships hard limits (`MAX_GROUPING_DEPTH=100`, `MAX_GROUPING_TOKENS=10000`) intended to bound pars
vm2's bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike
CVE-2026-47683
## Summary vm2 bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike The `bufferAllocLimit` option
Glances: as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config
CVE-2026-68520
## Summary Glances provides `as_dict_secure()` explicitly designed for unauthenticated API access, with a docstring sta
Glances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of CVE-2026-53925)
CVE-2026-68519
## Summary In Glances 4.5.5 the `--disable-config-exec` flag was extended (GHSA-3vwc-qwhc-3mj7) to stop `secure_popen()`
Glances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injection
CVE-2026-62982
## Summary CVE-2026-32608 ("Command Injection via Process Names in Action Command Templates") was fixed (commit `5680a5d
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。