The Masteriyo LMS WordPress plugin before 3.4.0 does not sanitise and escape some course...
CVE-2026-82846
The Masteriyo LMS WordPress plugin before 3.4.0 does not sanitise and escape some course settings before outputting the
2026-09-06 归档
今日共收录 918 条安全情报，包含 147 个 CVE，434 篇安全通告，以及 81 篇研究论文。
← 返回归档列表The Smart Post WordPress plugin before 4.0.8 does not check the type, ownership or status of the...
CVE-2026-78150
The Smart Post WordPress plugin before 4.0.8 does not check the type, ownership or status of the post it is asked to du
vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts
CVE-2026-73557
## Executive Summary The follow-up protection for CVE-2025-62164 is incomplete at vLLM revision `26587f9519e22a5c4549ea
vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m
CVE-2026-73556
### Summary The fix for `GHSA-rwxx-mrjm-wc2m` ("ReDoS via `structured_outputs.regex` compiled without timeout") wrapped
SiYuan: Static-file routes bypass the publish-access controls enforced on the REST API, exposing templates, snippets and export artifacts to anonymous readers
CVE-2026-72796
**CVE:** This vulnerability corresponds to [CVE-2026-72796](https://nvd.nist.gov/vuln/detail/CVE-2026-72796). ### Summa
SiYuan: Publish-access filter on renderAttributeView leaves related-database content unfiltered and fails open on non-block first columns
CVE-2026-72798
**CVE:** This vulnerability corresponds to [CVE-2026-72798](https://nvd.nist.gov/vuln/detail/CVE-2026-72798). ### Summa
CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository
CVE-2026-75911
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval
CVE-2026-75912
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: SSRF bypass - TOCTOU on DNS failure for DNS pinning
CVE-2026-75856
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)
CVE-2026-75857
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository
CVE-2026-75859
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes
CVE-2026-75914
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
SurrealDB allows bypass of deny-net flags via DNS resolution
CVE-2025-71390
SurrealDB offers http functions that can access external network endpoints. A typical, albeit [not recommended ](https:/
PatchBench: Evaluating AI Agents for Vulnerability Patching
本文针对基于大语言模型的AI智能体在自动化漏洞修复评估中存在的效度威胁问题开展研究。作者指出，现有评估方法通常仅通过让补丁接受原始PoC（概念验证）输入不再触发崩溃来判定补丁有效，但这种验证方式存在两个主要缺陷：一是智能体可能直接复现历史开
PrimSynth: An Agentic Approach to Discover, Validate, and Synthesize Exploit Primitives for Linux Kernel Vulnerabilities
本文针对 Linux 内核漏洞利用中抽象策略与具体技术操作之间存在概念鸿沟的问题，提出了一种系统化的漏洞利用原语表征与自动化合成方法。作者首先形式化定义了六类漏洞利用原语，从逻辑能力到可验证效果进行归类；随后提出一种扩展的利用策略表示，将原
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Exe...
CVE-2026-86166
CVE-2026-86166 是 Tenda HG10 路由器（固件版本 300001138）中存在的一个缓冲区溢出漏洞。漏洞位于 Boa Web Server 组件的 /boaform/formWanRedirect 文件中，具体涉及 f
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/trans_view.php. The manipulation of the ar...
CVE-2026-86164
CVE-2026-86164 影响 itsourcecode 开发的 Sales and Inventory System 1.0（销售与库存管理系统）。该漏洞位于 /pages/trans_view.php 页面，由于程序未能对请求参数
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/pro_del.php. The manipulation of the argument ...
CVE-2026-86163
该漏洞存在于 itsourcecode Sales and Inventory System 1.0 版本中。具体而言，/pages/pro_del.php 文件内的某个处理逻辑（未指明具体函数）对参数 'ID' 的输入过滤不严，导致可被操
A vulnerability was determined in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /ajax.php?action=login. Executing a manipulation of the a...
CVE-2026-86162
SourceCodester Online Voting System 1.0 被发现存在一个 SQL 注入漏洞，具体位于 '/ajax.php' 文件的登录功能中。该登录接口接收 'Username' 参数，攻击者在未获得任何身份验证的情
A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=delete_category. Performing a mani...
CVE-2026-86161
CVE-2026-86161 是 SourceCodester Online Voting System 1.0 中存在的一处 SQL 注入漏洞。该漏洞位于 /ajax.php?action=delete_category 文件中的未知函数