京ICP证080047号[京ICP备08010314号-6]
本次输入并非一条可用的安全漏洞公告，而是 360CERT 来源条目中抓取到的一条 ICP 备案信息页面，标题为“京ICP证080047号[京ICP备08010314号-6]”，来源链接指向工信部备案管理系统（beian.miit.gov.c
2026-09-30 归档
今日共收录 1598 条安全情报，包含 728 个 CVE，467 篇安全通告，以及 100 篇研究论文。
← 返回归档列表AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating u...
CVE-2026-103056
AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStr
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRnetwork/ping. Such manipulation of the argument url l...
CVE-2026-102794
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /ap
A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function set_time_zone of the file /api/ZRFirmware/set_time_zone. This manipulation of the ar...
CVE-2026-102793
A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function set_time_zone of the file /
LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. Attackers can send crafted seri...
CVE-2026-103041
LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization e
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. This affects the function set_syslog of the file /api/ZRnetwork/set_syslog. The manipulation of the argument conlogle...
CVE-2026-102792
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. This affects the function set_syslog of the file /api/ZRnetw
The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection.
CVE-2026-72510
The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injecti
The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability.
CVE-2026-72507
The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to
The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request.
CVE-2026-71379
The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted PO
The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server.
CVE-2026-70356
The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and exe
The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability.
CVE-2026-68954
The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blin
The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability.
CVE-2026-68068
The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is su
The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability.
CVE-2026-63713
The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind
The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storag...
CVE-2026-96587
The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These cr
A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authen...
CVE-2026-76725
A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauth
A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform command injection ...
CVE-2026-76724
A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauth
Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacent attacker to achieve remote code exe...
CVE-2026-76723
Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an una
Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote attacker to run arbitrary ...
CVE-2026-76722
Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could a
Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the unde...
CVE-2026-76721
Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthen
Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack redep...
CVE-2026-53988
Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthen