今日共收录 1656 条安全情报，包含 834 个 CVE，420 篇安全通告，以及 108 篇研究论文。
← 返回归档列表CVE-2026-55526
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spider_tools._host_is_blocked() does not resol
CVE-2026-16599
GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequ
CVE-2026-15310
When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controll
CVE-2026-79655
A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform a
CVE-2026-79623
A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown functi
CVE-2026-79622
A weakness has been identified in dekdee adobe-xd-mcp 1.0.0. Impacted is an unknown function of the file src/parsers/xd-
CVE-2026-55525
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the web_crawl function validates only the init
CVE-2026-79406
A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceIm
CVE-2026-78887
A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of th
CVE-2026-78886
A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/s
CVE-2026-78885
A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of t
CVE-2026-77998
Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML
CVE-2026-75803
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying th
CVE-2026-63074
Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a C
CVE-2026-63073
Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the f
CVE-2026-63072
Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but t
CVE-2026-57863
Crater Invoice through 6.0.6 contains a path traversal vulnerability in the self-update API that allows authenticated co
CVE-2026-54874
Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far
CVE-2026-18798
Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial pac
CVE-2026-14457
Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key