Unauthenticated Cross Site Scripting (XSS) in LeadConnector <= 4.0.5 versions.
CVE-2026-81298
Unauthenticated Cross Site Scripting (XSS) in LeadConnector <= 4.0.5 versions.
2026-09-01 归档
今日共收录 1266 条安全情报，包含 424 个 CVE，451 篇安全通告，以及 107 篇研究论文。
← 返回归档列表Unauthenticated Cross Site Scripting (XSS) in Email Subscribers & Newsletters <= 5.9.33 versions.
CVE-2026-81290
Unauthenticated Cross Site Scripting (XSS) in Email Subscribers & Newsletters <= 5.9.33 versions.
An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary...
CVE-2026-79408
An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path arg
XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher...
CVE-2026-75460
XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /ap
Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly...
CVE-2026-81278
Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Secur
The teacher-end interface POST /api/teacher/user/delete/{id} in XueZhiSi Open Source Exam System ...
CVE-2026-75458
The teacher-end interface POST /api/teacher/user/delete/{id} in XueZhiSi Open Source Exam System <= 3.9.0 contains a ver
FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST ...
CVE-2026-79483
FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistor
A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read...
CVE-2026-79407
A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the
Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...
CVE-2026-51740
Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacke
Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...
CVE-2026-51736
Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacke
Incorrect access control in the showSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...
CVE-2026-51735
Incorrect access control in the showSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacker
A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning...
CVE-2026-82833
A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Label
Incorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748_B20211015...
CVE-2026-51737
Incorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated
A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects...
CVE-2026-82835
A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file
Incorrect access control in the informSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015...
CVE-2026-51734
Incorrect access control in the informSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated a
Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748_B20211015...
CVE-2026-51738
Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated att
Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers...
CVE-2026-38577
Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.
A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning...
CVE-2026-82834
A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto
A vulnerability was detected in sdcb chats up to 1.12.0. This affects the function McpController...
CVE-2026-82905
A vulnerability was detected in sdcb chats up to 1.12.0. This affects the function McpController of the file src/BE/web/
Unrestricted deserialization of untrusted data in the cursor pagination component in the...
CVE-2026-83497
Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a