A security flaw has been discovered in ramon-victor freegpt-webui up to...
CVE-2026-85704
A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This i
2026-09-05 归档
今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。
← 返回归档列表A security vulnerability has been detected in ramon-victor freegpt-webui up to...
CVE-2026-85702
A security vulnerability has been detected in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc.
An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs...
CVE-2026-85787
An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before ve
A vulnerability has been found in ramon-victor freegpt-webui up to...
CVE-2026-85701
A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue
Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of...
CVE-2026-75438
Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogs_sbi_ti
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request...
CVE-2026-82712
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability.
easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of File with Dangerous Type in the...
CVE-2026-50894
easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of File with Dangerous Type in the background management interfa
An arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component of CRMEB...
CVE-2026-79426
An arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component of CRMEB v6.0.0 allows authenti
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded...
CVE-2026-77847
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded credential vulnerability
An authenticated remote code execution (RCE) vulnerability in the admin_config.php component of...
CVE-2026-79423
An authenticated remote code execution (RCE) vulnerability in the admin_config.php component of seacms v13.6 allows atta
An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF...
CVE-2026-75439
An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component
SQL Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute...
CVE-2025-67066
SQL Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute arbitrary code via the outtyp
An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via...
CVE-2026-71626
An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.
An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the...
CVE-2026-71625
An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController
Italtel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NP_IBCF-NATUP-01/NMSCI-WebGui...
CVE-2022-26961
Italtel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NP_IBCF-NATUP-01/NMSCI-WebGui/backup_restore.jsp and
An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core...
CVE-2026-71624
An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class
Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT...
CVE-2026-79390
Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plain
No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client...
CVE-2026-79391
No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP por
SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain...
CVE-2026-71622
SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...
CVE-2026-80114
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10