Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X allows Malicious Software Implanted. This issue affects Newspapers X: from 1.0.46 t...

CVE-2026-81779

Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X allows Malicious Software I

历史摘要 · 未重新核验 · NVD

Unauthenticated SQL Injection in Throws SPAM Away <= 3.8.2 versions.

CVE-2026-81763

Unauthenticated SQL Injection in Throws SPAM Away <= 3.8.2 versions.

历史摘要 · 未重新核验 · NVD

Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms <= 5.1.24 versions.

CVE-2026-81756

Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms <= 5.1.24 versions.

历史摘要 · 未重新核验 · NVD

Unauthenticated SQL Injection in WP Data Access <= 5.5.81 versions.

CVE-2026-81293

Unauthenticated SQL Injection in WP Data Access <= 5.5.81 versions.

历史摘要 · 未重新核验 · NVD

An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.rebuild_class_views() in metagpt/repo...

CVE-2026-79408

An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path arg

历史摘要 · 未重新核验 · NVD

Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.

CVE-2026-38577

Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.

历史摘要 · 未重新核验 · NVD

Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted P...

CVE-2026-51740

Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacke

历史摘要 · 未重新核验 · NVD

Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase system logs via sending a crafted POST reques...

CVE-2026-51736

Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacke

历史摘要 · 未重新核验 · NVD

Incorrect access control in the informSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger mesh slave update coordination via se...

CVE-2026-51734

Incorrect access control in the informSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated a

历史摘要 · 未重新核验 · NVD

Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove VLAN entries via sending a crafted POST reque...

CVE-2026-51731

Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacker

历史摘要 · 未重新核验 · NVD

Goploy is an open-source automation deployment system. In versions 1.17.5 and prior, Project.AddFile, Project.EditFile, Project.RemoveFile, and Project.Edit in cmd/server/api/pr...

CVE-2026-53552

Goploy is an open-source automation deployment system. In versions 1.17.5 and prior, Project.AddFile, Project.EditFile,

历史摘要 · 未重新核验 · NVD

Incorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to request deletion of a managed slave device via sendin...

CVE-2026-51729

Incorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers

历史摘要 · 未重新核验 · NVD

Incorrect access control in the delParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove parental-control rules via sending a cr...

CVE-2026-51726

Incorrect access control in the delParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated at

历史摘要 · 未重新核验 · NVD

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

历史摘要 · 未重新核验 · CNCERT

Palo Alto Networks Acquires AI Agent Platform Console

The cybersecurity giant announced the acquisition alongside quarterly results showing a 34% increase in revenue and stro

历史摘要 · 未重新核验 · SecurityWeek

Towards Operator-Empowered Vulnerability Hotfixing for 5G Radio Access Networks

蜂窝网络协议中的漏洞常因标准组织、设备商与移动网络运营商(MNO)之间的多方协调而长期得不到修复，暴露窗口可能持续数月至数年。本文提出Buckler框架，允许MNO在此窗口期内在无线接入网(RAN)侧部署临时的、本地的且可逆的热修复。Buc

历史摘要 · 未重新核验 · arXiv cs.CR

MROP: Mask-Region Optimized Purification Against Backdoor Attack in Deep JSCC

本文研究面向深度联合信源信道编码（Deep JSCC）系统中输入补丁后门攻击的防御问题。Deep JSCC通过端到端深度神经网络将信源直接映射为信道符号并在接收端重构，以图像传输为例，该流程在黑盒条件下存在安全隐患：接收端难以察觉传输图像被

历史摘要 · 未重新核验 · arXiv cs.CR

Drishti: AI-Led Human-Directed Vulnerability Auditing for 5G Cores

本文提出了一种名为 Drishti 的、由 AI 主导但由人类指导的漏洞审计框架，针对开源 5G 核心网软件中漏洞验证与影响评估成本高昂的问题。作者指出，随着 AI 辅助代码审查的发展，生成候选缺陷已不再困难，真正的瓶颈在于验证和影响评估，

历史摘要 · 未重新核验 · arXiv cs.CR

京公网安备 11000002002063号

该条记录来自“360CERT 安全报告”，标题为“京公网安备 11000002002063号”，但 source_url 指向的是全国公安政务服务平台（beian.gov.cn）的备案查询页面，内容为网站备案信息，并非安全威胁情报。原始输入

历史摘要 · 未重新核验 · 360CERT 安全报告