2026-09-21 归档

今日共收录 815 条安全情报,包含 111 个 CVE,394 篇安全通告,以及 53 篇研究论文。

← 返回归档列表
漏洞预警2026-09-20 发布INFO

Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daemon WebSocket origin validation that accepts any chrome-extension origin with ...

CVE-2026-94111

Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daemon WebSocket origin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

openEQUELLA versions before 2026.1.0 contain a remote code execution vulnerability in FreeMarker template compilation due to an unsandboxed TemplateClassResolver configuration. ...

CVE-2026-94109

openEQUELLA versions before 2026.1.0 contain a remote code execution vulnerability in FreeMarker template compilation du

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. A...

CVE-2026-94108

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fail

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that generates recovery codes using substr(md5(mt_rand()), 0, 10)....

CVE-2026-94107

NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that gene

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft malicious filenam...

CVE-2026-94106

getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller that allows unauthenticated attackers to disable password ...

CVE-2026-94105

NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails to validate file extensions for new filenames or when chun...

CVE-2026-94104

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytag_js.php. The manipulation of the argument aid results in co...

CVE-2026-94004

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytag_j

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown functionality of the file /Admin/edit_symptom.php. This m...

CVE-2026-93997

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Log...

CVE-2026-93980

A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown cod

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of...

CVE-2026-93979

A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation ...

CVE-2026-93978

A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown functionality of the file lecturer/add-single-mark.php. T...

CVE-2026-93977

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/add-user.php. The manipulation of the argument level resu...

CVE-2026-93976

A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown function of the file admin/edit-user.php of the component User Editing. The ma...

CVE-2026-93975

A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown function of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server in...

CVE-2026-86555

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plain

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer_0/admins/assessments/databank/btn_functions...

CVE-2026-93974

A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer_0/admins/assessments/subj...

CVE-2026-93973

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/as...

CVE-2026-93972

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevops/settings.py. This manipulation causes information disc...

CVE-2026-93971

A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevo

历史摘要 · 未重新核验 · NVD