2026-09-21 归档

今日共收录 815 条安全情报,包含 111 个 CVE,394 篇安全通告,以及 53 篇研究论文。

← 返回归档列表
漏洞预警2026-09-20 发布INFO

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveGallery() passes form data...

CVE-2026-88855

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Jooml

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions showSearchResult() and showSearchResultA...

CVE-2026-88854

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar()

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the function testLLMProviderAction of the file app/(app)/apps/settings/actions.ts. Execut...

CVE-2026-94040

A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the function testLLMProviderActi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /apps/invoices/actions.ts of the component Invoice PDF Rende...

CVE-2026-94039

A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /ap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of the file deno/main.tsx of the component Deno Backend. Such ...

CVE-2026-94038

A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affects the function ControlFlowNode of the file main.py of t...

CVE-2026-94037

A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drug_recommender/index.php. Executing a manipulatio...

CVE-2026-94035

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drug_recommender/Admin/change_password of the...

CVE-2026-94034

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drug_recommender/Admin/add_user of the comp...

CVE-2026-94033

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/department/index.php. This manipulation of the argument ID ca...

CVE-2026-94032

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/depa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function child_process.exec of the file src/auth/bro...

CVE-2026-94031

A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decode_bmp_pixel_data of ...

CVE-2026-94030

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by thi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A weakness has been identified in mealie-recipes Mealie up to 3.25.1. Affected is the function payload.model_dump of the file mealie/routes/households/controller_group_recipe_ac...

CVE-2026-94028

A weakness has been identified in mealie-recipes Mealie up to 3.25.1. Affected is the function payload.model_dump of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drug_recommender/Admin/add_symptom. Performin...

CVE-2026-94016

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drug_recommender/Admin/edit_user.php. Such manipul...

CVE-2026-94015

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driver versions 1.3.0.0 and earlier) on Microsoft Windows all...

CVE-2026-92254

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a qua...

CVE-2026-92253

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Wind

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privileged users to modify, replace, or delete antivirus binaries ...

CVE-2026-92252

Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privilege

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in whitelisted timesheet endpoints that fail to enforce doctype p...

CVE-2026-94113

Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in white

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

mayswind ezBookkeeping before 2.0.0 fails to invalidate TOTP passcodes after use, allowing attackers to replay captured codes within the acceptance window. Attackers with stolen...

CVE-2026-94112

mayswind ezBookkeeping before 2.0.0 fails to invalidate TOTP passcodes after use, allowing attackers to replay captured

历史摘要 · 未重新核验 · NVD