京网文〔2020〕6051-1195号
输入数据仅包含一条来自 360CERT 安全报告条目的标题与元数据，无正文摘要或技术细节。标题“京网文〔2020〕6051-1195号”实为网络文化经营许可证编号，并非有效的安全事件或漏洞信息。标签中标注了“report、apt、malwa
2026-08-29 归档
今日共收录 1687 条安全情报，包含 687 个 CVE，604 篇安全通告，以及 114 篇研究论文。
← 返回归档列表京ICP证080047号[京ICP备08010314号-6]
本次输入内容为京ICP备案号信息（京ICP证080047号[京ICP备08010314号-6]），来源标注为360CERT安全报告，但来源URL指向工信部备案查询网站（beian.miit.gov.cn），且发布时间为2026年8月29日，
The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX actions, allowing any authenticated user, such as a subsc...
CVE-2026-81346
CVE-2026-81346 是 WordPress 插件 Frontend Admin by DynamiApps 中的一个权限缺失漏洞，影响 3.29.11 之前的版本。该插件的一个 AJAX 动作在执行时未进行能力检查（capabil
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthent...
CVE-2026-81342
CVE-2026-81342 影响 MasterStudy LMS WordPress 插件 3.7.43 之前的版本。该插件是一个用于创建在线课程和学习管理系统的 WordPress 插件。漏洞出现在用户注册环节：当用户通过包含特定重定向
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status of a payment notification before marking the corres...
CVE-2026-81026
MasterStudy LMS WordPress插件（版本低于3.7.40）存在支付验证缺失漏洞。该插件在接收到支付通知时，未校验订单金额、收款方、货币种类及支付状态，直接将会话对应的订单标记为已完成。攻击者无需认证，即可通过构造请求，将
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enfo...
CVE-2026-77010
CVE-2026-77010 影响 HEL Online Classroom WordPress 插件（版本 1.0.3 及之前）。该插件用于创建 AI 驱动的在线课堂，但存在严重的访问控制缺陷。具体而言，插件暴露的 REST API 路由
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or authentication check when saving its settings, allowing ...
CVE-2026-77008
CVE-2026-77008 影响 WordPress 插件 HEL Online Classroom（AI-powered Online Classrooms）1.0.3 及更早版本。该插件在保存设置时缺失任何授权或身份验证检查，导致未认
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform any authorisation check on one of its REST API routes, allowing unauthenti...
CVE-2026-77007
CVE-2026-77007 是一个影响 HEL Online Classroom WordPress 插件的漏洞，该插件提供 AI 驱动的在线课堂功能。在版本 1.0.3 及更早版本中，插件的一个 REST API 路由缺少授权检查，导致
The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, granting unauthenticated visitors capabilities reserved to ...
CVE-2026-76548
CVE-2026-76548 影响 WordPress 插件 User Profile Builder 4.0.1 之前的版本。该插件的前端文件上传功能存在权限限制不当的问题，导致未认证的访客能够执行本应仅限特权角色（如管理员、编辑）执行的
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling belongs to the requester, and does not deduct the wallet ba...
CVE-2026-18234
CVE-2026-18234 影响 MStore API WordPress 插件 4.21.1 之前的版本。该插件用于为 WooCommerce 提供移动应用 API 接口。漏洞存在于钱包支付处理逻辑中：插件未验证订单是否属于当前发起支付
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints belongs to the requester, allowing any authenticated user...
CVE-2026-18233
CVE-2026-18233 是 WordPress 插件 MStore API 在 4.21.1 版本之前存在的一个访问控制缺陷。该插件提供多个接口用于移动应用与 WooCommerce 店铺交互，其中某个配送（delivery）端点未能
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Cloud ManagerManage your cloud computing services
Cloud ManagerManage your cloud computing services
See all Cloud Computing
See all Cloud Computing
智利银行在勒索软件攻击后关闭所有分行
智利银行在勒索软件攻击后关闭所有分行
Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019
Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019
Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019
Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019
Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018
Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018
How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem
How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem
Threat Hunting & Intel
Threat Hunting & Intel