Wagtail: Improper restriction handling on Pages admin API
CVE-2026-55468
### Impact The internal Pages admin [API](https://docs.wagtail.org/en/stable/advanced_topics/api/index.html) incorrectl
2026-08-21 归档
今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。
← 返回归档列表PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-65801
Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges ov
Differential analysis of x86-64 instruction decoders.
本文研究如何将差分模糊测试（differential fuzzing）应用于 x86-64 指令解码器的错误发现。传统模糊测试依赖崩溃、挂起或内存访问错误作为 oracle，而差分模糊测试将同一输入在不同实现之间的行为差异作为潜在错误信号。
Poster: High-Fidelity and Contextual User Activity Memory Forensics.
该论文提出了一种名为 RAM-Weaver 的系统，旨在解决从内存转储中检索应用程序用户活动信息的传统难题。内存取证领域长期以来面临两大挑战：一是内存数据量庞大，二是应用程序内部的数据结构往往不透明且复杂，导致人工分析过程耗时且容易出错。R
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as...
CVE-2026-77647
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to...
CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
The customer update route in EverShop is declared with "access": "public" in packages/evershop...
CVE-2026-72843
The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/
Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from...
CVE-2026-72846
Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/b
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to...
CVE-2026-69851
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a...
CVE-2026-69555
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary...
CVE-2026-18840
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper val
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of...
CVE-2026-18828
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to...
CVE-2026-65816
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX...
CVE-2026-19442
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initi
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized...
CVE-2026-62834
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privil
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated...
CVE-2026-18842
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL...
CVE-2026-68782
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an aut
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges...
CVE-2026-66309
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.