A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and...
CVE-2026-83524
A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 2
2026-09-01 归档
今日共收录 1266 条安全情报，包含 424 个 CVE，451 篇安全通告，以及 107 篇研究论文。
← 返回归档列表A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown...
CVE-2026-82971
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-b
A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function...
CVE-2026-82954
A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the fi
Kirby: File upload permissions are not checked during processing of chunk data
CVE-2026-71415
### TL;DR This vulnerability affects all Kirby sites where users of a particular role have access to the REST API (`acc
Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions.
CVE-2026-82226
Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions.
Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms <= 5.1.24 versions.
CVE-2026-81756
Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms <= 5.1.24 versions.
Unauthenticated SQL Injection in Throws SPAM Away <= 3.8.2 versions.
CVE-2026-81763
Unauthenticated SQL Injection in Throws SPAM Away <= 3.8.2 versions.
Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X...
CVE-2026-81779
Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X allows Malicious Software I
Unauthenticated Arbitrary File Upload in Hash Form <= 1.4.2 versions.
CVE-2026-81780
Unauthenticated Arbitrary File Upload in Hash Form <= 1.4.2 versions.
Unauthenticated SQL Injection in WP Data Access <= 5.5.81 versions.
CVE-2026-81293
Unauthenticated SQL Injection in WP Data Access <= 5.5.81 versions.
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the...
CVE-2026-81267
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the d
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application...
CVE-2025-63607
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application echoes the id parameter v
Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu...
CVE-2026-51739
Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticate
Pangolin before 1.22.0 contains an authentication bypass vulnerability that allows...
CVE-2026-72001
Pangolin before 1.22.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access a
@hono/oauth-providers: OAuth state check fails open on omitted state, enabling login CSRF and forced account linking
CVE-2026-81888
### Summary The built-in social login providers accept an OAuth callback even when the `state` value is absent on both
Incorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015...
CVE-2026-51730
Incorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated att
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2