2026-08-25 归档

今日共收录 1135 条安全情报,包含 329 个 CVE,404 篇安全通告,以及 111 篇研究论文。

← 返回归档列表
漏洞预警2026-08-24 发布INFO

NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML fil...

CVE-2026-19852

NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

The Velociraptor verify() VQL function allows a user to verify an artifact for syntatic and other issues. Due to an implementation fault in this VQL function, the global artifac...

CVE-2026-19200

The Velociraptor verify() VQL function allows a user to verify an artifact for syntatic and other issues. Due to an impl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A vulnerability was determined in jQWidgets up to 24.0.1. This affects the function JQXLite.extend/jqxBaseFramework.extend of the file jqwidgets/jqx-all.js. This manipulation ca...

CVE-2026-78178

A vulnerability was determined in jQWidgets up to 24.0.1. This affects the function JQXLite.extend/jqxBaseFramework.exte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src/package-manager.t...

CVE-2026-78177

A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. Th...

CVE-2026-78171

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unkn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argum...

CVE-2026-78170

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formCo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/pro...

CVE-2026-78166

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmart

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cel...

CVE-2026-78209

exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values writte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shar...

CVE-2026-78205

BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.test_func returns only request.user.is_activ...

CVE-2026-78204

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccess

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipula...

CVE-2026-78161

A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing of the file /user/note.php of the component User Notes Han...

CVE-2026-78160

A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseRequest Path Handler. Executing a manipulation can lead to i...

CVE-2026-78158

A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseReq

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a ...

CVE-2026-78157

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-pat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hss_ogs_diam_s6a_air_cb of the file src/hss/hss-s6a-path.c of the component S...

CVE-2026-78156

A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hss_ogs_diam_s6a_air

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem_invitation_code of the file backend/app/api/routes/v1/user_invitation...

CVE-2026-78154

A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem_invitation_c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc_server::graph_compute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component g...

CVE-2026-78148

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc_server::graph_compute of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布INFO

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component gg...

CVE-2026-78147

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布INFO

A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function _is_safe_url of the file CTFd/utils/validators/__init__.py. Such manipulation of the arg...

CVE-2026-78145

A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function _is_safe_url of the file CTFd/u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布INFO

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarde...

CVE-2026-78144

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vuln

历史摘要 · 未重新核验 · NVD