今日共收录 884 条安全情报，包含 147 个 CVE，402 篇安全通告，以及 73 篇研究论文。
← 返回归档列表CVE-2026-100882
A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Web
CVE-2026-100881
A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown proce
CVE-2026-96281
On a multi-user system, a user with an active local login session could downgrade a system-wide Flatpak app to an older
CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (
CVE-2026-101089
Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the
CVE-2026-101088
Nezha is a server and website monitoring tool. In versions >= 2.2.11 and < 2.3.1, the service sentinel worker (service/s
CVE-2026-101087
Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable notification and DDNS web
CVE-2026-101086
Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing aut
CVE-2026-101085
Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users
CVE-2026-101064
Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows p
CVE-2026-101063
Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/* when registry authen
CVE-2026-100880
A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the fi
CVE-2026-100879
A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed o
CVE-2026-100878
A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.is
CVE-2026-100877
A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be
CVE-2026-96279
A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates
CVE-2026-100876
A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Aff
CVE-2026-100875
A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be
CVE-2026-100874
A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This af
CVE-2026-100873
A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be.