今日共收录 1266 条安全情报，包含 424 个 CVE，451 篇安全通告，以及 107 篇研究论文。
← 返回归档列表CVE-2026-75594
Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's medi
CVE-2026-75592
Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's medi
CVE-2026-75460
XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /ap
CVE-2026-75458
The teacher-end interface POST /api/teacher/user/delete/{id} in XueZhiSi Open Source Exam System <= 3.9.0 contains a ver
CVE-2026-71415
Kirby is an open-source content management system. From 5.0.0 until 5.5.2, Kirby's REST API chunk upload handler in src/
CVE-2026-62993
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prio
CVE-2026-61641
Wallos is an open-source, self-hostable personal subscription tracker. From version 4.0.0 to before version 4.9.6, Wallo
CVE-2026-61640
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, Admin-configured OIDC tok
CVE-2026-61639
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/db/restor
CVE-2026-61638
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/notificat
CVE-2026-54600
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, endpoints/db/import.php h
CVE-2026-54598
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, endpoints/db/migrate.php
CVE-2026-54179
backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages tha
CVE-2026-50198
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, an authenticated user can
CVE-2026-38577
Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.
CVE-2025-63607
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application echoes the id parameter v
CVE-2026-82905
A vulnerability was detected in sdcb chats up to 1.12.0. This affects the function McpController of the file src/BE/web/
CVE-2026-82835
A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file
CVE-2026-82834
A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto
CVE-2026-82833
A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Label