今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2025-14602
The application generates uploaded file names using a weak and predictable method based on the request timestamp. This a
CVE-2026-75963
The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.
CVE-2026-74992
The Kirki WordPress plugin before 6.2.3 does not properly validate the files contained in archives uploaded by users wi
CVE-2026-73542
Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an at
CVE-2026-19699
The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoint
CVE-2026-19697
The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the upload paths it enables,
CVE-2026-19615
The Admin and Site Enhancements (ASE) WordPress plugin before 9.0.1 does not sanitise uploaded SVG files on every route
CVE-2026-17153
The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi
CVE-2026-15049
The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded throug
CVE-2026-13405
The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not correctly sanitise custom widget markup before
CVE-2026-76957
libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur
CVE-2026-76956
In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, w
CVE-2026-19582
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code
CVE-2026-76800
A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dial
CVE-2026-76799
A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the f
CVE-2026-76795
A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This impacts an unknown function of the file /api of the c
CVE-2026-76785
A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System 0.1. Affected is the functio
CVE-2026-76783
A security vulnerability has been detected in DeDeCMS 53_1_UTF8. This vulnerability affects unknown code of the file /pl
CVE-2026-75628
Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_pa
CVE-2026-8619
An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.