Thai Broadband Provider Hacked via Fortinet Vulnerability
The hackers staged numerous scripts for reconnaissance and CVE probing, along with brute-force utilities and privilege e
2026-09-16 归档
今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。
← 返回归档列表On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an...
CVE-2026-73450
On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with a
A vulnerability was determined in gedelumbung HospitalManagement up to...
CVE-2026-92221
A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affecte
@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring...
CVE-2026-92299
@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMe
A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This...
CVE-2026-92247
A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename o
A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the...
CVE-2026-92216
A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file
A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function of the...
CVE-2026-92214
A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function of the file samples/community/c
A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability...
CVE-2026-92215
A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.g
A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any...
CVE-2026-92213
A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/we
EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in,...
CVE-2026-92298
EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in, event invitation, and camp
On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated...
CVE-2026-73460
On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject
A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function...
CVE-2026-92184
A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of th
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who...
CVE-2026-73459
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially c
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an...
CVE-2026-73446
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret...
CVE-2026-15640
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.
An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt...
CVE-2026-15638
An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using on
A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a...
CVE-2026-92248
A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD (Photos
A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function...
CVE-2026-92114
A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/
Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7...
CVE-2026-92257
Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages t
Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with...
CVE-2026-92259
Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the by