getID3 before 1.9.26 OS Command Injection via Unescaped Filenames
CVE-2026-94106
getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames
2026-09-21 归档
今日共收录 815 条安全情报，包含 111 个 CVE，394 篇安全通告，以及 53 篇研究论文。
← 返回归档列表NivoCart through 2.4.0 Destructive Configuration Write via the Password Reset Controller
CVE-2026-94105
NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller t
NivoCart through 2.4.0 Arbitrary File Upload RCE via filemanager
CVE-2026-94104
NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails t
aiyiyi121 SxDevOps settings.py information disclosure
CVE-2026-93971
A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevo
aiyiyi121 SxDevOps Settings settings.py hard-coded credentials
CVE-2026-93970
A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the fil
aiyiyi121 SxDevOps services.py ensure_default_superuser hard-coded credentials
CVE-2026-93969
A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_sup
aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management
CVE-2026-93968
A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/
aiyiyi121 SxDevOps Command services.py generate_host_task command injection
CVE-2026-93967
A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this issue is the function generate_host_task of th
aiyiyi121 SxDevOps TASK_RUN_COMMAND host_tasks.py paramiko.SSHClient.exec_command command injection
CVE-2026-93966
A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the function paramiko.SS
aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection
CVE-2026-93965
A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops
NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication
CVE-2026-93964
A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCe
Compatibility Test Suite (CTS)
本条信息来自 Android 官方安全公告渠道，条目名称为“Compatibility Test Suite（CTS）”，指向 AOSP 官方的 CTS 文档页面（https://source.android.com/docs/compat
Compatibility Definition Document (CDD)
本条内容来自 Android 官方安全公告渠道，但其指向的是《Compatibility Definition Document（CDD，兼容性定义文档）》这一文档页面，而非某一个具体漏洞的修补公告。CDD 是 Android 生态中描述“
Tools, build, and related reference
本条记录来自 Android 安全公告（Android Security Bulletin）官方站点，标题为“Tools, build, and related reference”，对应 URL 为 source.android.com/
Latest Compatibility Definition Document (CDD)
本次输入来自 Android 官方安全公告站点（source.android.com）中的「最新兼容性定义文档（CDD）」页面，属于 Android 兼容性计划的文档更新说明，而非传统意义上的漏洞公告。CDD 是 Google 面向 And
Latest security bulletins
该条目的来源是 Google Android 官方安全公告页面（source.android.com 上的“Latest security bulletins”索引页），发布时间为 2026-09-21。该页面本身是 Android 月度安
update the software on your Mac
本条信息来自 Apple 官方支持站点（support.apple.com）的安全发布页面，标题为「更新你 Mac 上的软件」（update the software on your Mac）。该页面属于 Apple 面向 Mac 用户的软
update the software on your iPhone or iPad
本条来自 Apple 官方安全发布渠道（Apple Security Releases），标题为“更新你的 iPhone 或 iPad 上的软件”，指向 Apple 支持站点的一篇通用升级指引页面。该页面属于 Apple 每轮 iOS /
submit your research
本次输入来自 Apple 官方安全发布页面（Apple Security Releases，地址 https://support.apple.com/en-us/102549），标题为 "submit your research"，发布时间
Get help with security issues
该条信息来自 Apple 官方安全发布页（Apple Security Releases），标题为“Get help with security issues”，发布时间为 2026-09-21。从现有输入看，这是一篇面向用户的安全支持或帮