2026-09-21 归档

今日共收录 815 条安全情报,包含 111 个 CVE,394 篇安全通告,以及 53 篇研究论文。

← 返回归档列表
漏洞预警2026-09-20 发布INFO

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user acting on an image owns the gallery it belongs to, allowing users granted ...

CVE-2026-81653

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user acting on an imag

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the requesting user is entitled to a given image record before returning it, allowi...

CVE-2026-81652

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the requesting user is ent

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user saving a gallery owns it, allowing any user granted its gallery-management...

CVE-2026-81651

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user saving a gallery

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive, due to a variabl...

CVE-2026-81650

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before requesting it server-side during a CSV import, allowing high...

CVE-2026-16542

The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before req

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before outputting them in an inline script context, which could ...

CVE-2026-14844

The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops/services.py of the component MCP STDIO Server Management...

CVE-2026-93965

A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certifica...

CVE-2026-93964

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manip...

CVE-2026-93963

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

SmartLife app dynamically generates fresh SmartLife application authentication parameters inside its runtime process. Using the acquired SmartLife application authentication par...

CVE-2026-86553

SmartLife app dynamically generates fresh SmartLife application authentication parameters inside its runtime process. Us

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authentication credentials, an ...

CVE-2026-86552

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acqui

历史摘要 · 未重新核验 · NVD

威胁情报2026-09-21 发布INFO

抢先加入AI时代顶尖安全团队!阿里云2027届实习生招聘来了!

该条目源自阿里云先知社区(xz.aliyun.com),标题为《抢先加入AI时代顶尖安全团队!阿里云2027届实习生招聘来了!》,发布时间标注为 2026-09-21。结合标题与标签(xianzhi、research、community)判

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-09-21 发布INFO

[分享]VMProtect3.5.1 x64Dbg插件AntiVmp v1.2发布

[分享]VMProtect3.5.1 x64Dbg插件AntiVmp v1.2发布

历史摘要 · 未重新核验 · 看雪

威胁情报2026-09-21 发布INFO

Control CenterManage your security and delivery services

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-09-21 发布INFO

See all Cybersecurity

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-09-21 发布INFO

Our Infrastructure

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-09-21 发布INFO

OpenClaw安全使用实践指南

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-09-21 发布INFO

关于OpenClaw安全应用的风险提示

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-09-21 发布INFO

关于“独狼”团伙大规模传播恶意程序的风险提示

关于“独狼”团伙大规模传播恶意程序的风险提示

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-09-21 发布INFO

关于RCtea僵尸网络大范围传播的风险提示

关于RCtea僵尸网络大范围传播的风险提示

历史摘要 · 未重新核验 · CNCERT