Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions.
CVE-2026-78262
Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions.
2026-08-25 归档
今日共收录 1135 条安全情报，包含 329 个 CVE，404 篇安全通告，以及 111 篇研究论文。
← 返回归档列表Unauthenticated SQL Injection in Boost <= 2.0.4 versions.
CVE-2026-32555
Unauthenticated SQL Injection in Boost <= 2.0.4 versions.
Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.
CVE-2026-32559
Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.
Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.
CVE-2026-78265
Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.
CVE-2026-32554
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.
Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63...
CVE-2026-32563
Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
CVE-2026-78267
Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
A vulnerability was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an...
CVE-2026-5006
A vulnerability was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an authenticated attacker may
RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys...
CVE-2026-78555
RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page. Althoug
The guard checker in Rocq Prover does not recheck the recursive tree representation of an...
CVE-2026-72704
The guard checker in Rocq Prover does not recheck the recursive tree representation of an inductive type parameter after
The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform...
CVE-2026-72703
The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform without examining calls betwe
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following')...
CVE-2026-63693
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privile
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report...
CVE-2026-71509
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint t
A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer...
CVE-2026-78541
A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenti
Sakai Profile Image Deletion has an IDOR
CVE-2026-54050
### Summary The Sakai REST API endpoint `DELETE /api/users/{userId}/profile/image` does not verify that the requesting
Sakai Conversations has a Stored XSS Issue
CVE-2026-54049
### Summary The Sakai Conversations tool stores topic and post messages without HTML sanitization, and the frontend ren
Hi.Events validates a webhook destination only when it is registered, never when it is used....
CVE-2026-76838
Hi.Events validates a webhook destination only when it is registered, never when it is used. NoInternalUrlRule in backen
OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may...
CVE-2026-76835
OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, b
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple...
CVE-2026-71933
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vul
Firefox browsers
Firefox browsers