2026-09-01 归档

今日共收录 1266 条安全情报,包含 424 个 CVE,451 篇安全通告,以及 107 篇研究论文。

← 返回归档列表
漏洞预警2026-08-31 发布INFO

Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash_admin lets an attacker who controls a sibling subdomain rebind an admin's session ...

CVE-2026-75757

Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash_admin lets an attacker wh

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. R...

CVE-2026-82604

A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language M

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the file /member.php?action=del_pl of the component Comment Cache. The manipulat...

CVE-2026-82603

A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the file /member.php?ac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /ass.php. The manipulation leads to authorization bypass. Th...

CVE-2026-82602

A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /as

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a manipulation of the argument errtxt can lead to cross site sc...

CVE-2026-82601

A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a mani

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown functionality of the file /zyapi.php?ac=videolist. Performing a manipulation of ...

CVE-2026-82600

A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown functionality of the fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses internal error text to chat users. In AshAi.ToolLoop and AshAi.Tools,...

CVE-2026-82580

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses internal erro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in ash-project ash_ai allows an attacker who can influence a model's output to hang the tool loop and drive un...

CVE-2026-82579

Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in ash-project ash_ai allows an attacker who can infl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_ai allows a caller of an identity-configured tool to update or destroy records it never identif...

CVE-2026-82564

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_ai allows a caller of an identity-conf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses provider request state and credentials in a user-facing validation err...

CVE-2026-75760

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses provider requ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was identified in SeaCMS up to 13.6. Affected by this vulnerability is the function unlink of the file /member.php?action=chgpwdsubmit of the component Avatar Up...

CVE-2026-82599

A vulnerability was identified in SeaCMS up to 13.6. Affected by this vulnerability is the function unlink of the file /

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was determined in SeaCMS up to 13.6. Affected is the function parseIf of the file search.php of the component Template Engine. This manipulation of the argument ...

CVE-2026-82598

A vulnerability was determined in SeaCMS up to 13.6. Affected is the function parseIf of the file search.php of the comp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681_B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument us...

CVE-2026-82597

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681_B20230703. This affects the function setUssd of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Origin Validation Error vulnerability in ash-project ash_ai allows a malicious web page to bypass the MCP server's DNS-rebinding protection and issue cross-site requests to a us...

CVE-2026-81315

Origin Validation Error vulnerability in ash-project ash_ai allows a malicious web page to bypass the MCP server's DNS-r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Improper Control of Generation of Code (Code Injection) vulnerability in ash-project ash_ai allows a remote, unauthenticated client to execute arbitrary Elixir code. AshAi.Acti...

CVE-2026-77956

Improper Control of Generation of Code (Code Injection) vulnerability in ash-project ash_ai allows a remote, unauthentic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was determined in LatencyUtils up to 2.0.3. Affected by this issue is the function LatencyStats.recordDetectedPause of the file src/main/java/org/LatencyUtils/La...

CVE-2026-82596

A vulnerability was determined in LatencyUtils up to 2.0.3. Affected by this issue is the function LatencyStats.recordDe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub_456CF4 of the file /boafrm/formSysCmd of the component System Command Exec...

CVE-2026-82595

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub_456CF4 of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to...

CVE-2026-82594

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-30 发布INFO

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of the file code/Ass...

CVE-2026-82591

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-30 发布INFO

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of the file src/smf/nudm-handler.c of the component SMF. Exec...

CVE-2026-82590

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of t

历史摘要 · 未重新核验 · NVD