UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService...
CVE-2026-82039
UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows
2026-10-03 归档
今日共收录 1361 条安全情报，包含 499 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表The All in One SEO WordPress plugin before 5.0.2.1 does not correctly determine which shortcodes...
CVE-2026-19856
The All in One SEO WordPress plugin before 5.0.2.1 does not correctly determine which shortcodes are present in content
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote...
CVE-2020-37278
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arb
CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11...
CVE-2014-125130
CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11 contains an unauthenticate
Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path
CVE-2026-59944
## Summary A malicious or compromised Composer package could, when installed as a dependency, cause Composer to change
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-64818
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a...
CVE-2026-59265
A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted docum
An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create...
CVE-2026-102626
An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScri
FinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code ().
CVE-2026-51918
FinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code ().
In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path...
CVE-2026-51906
In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows
In TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal...
CVE-2026-51907
In TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal vulnerability allows at
Aletheia: Permission-Minimality Testing for Coding-Agent Rules
这篇论文关注编码代理（coding agent）在读取仓库指令文件时的权限最小化与提示注入风险。当前仓库规则/指令文件能引导代理完成修改，但也可能被攻击者植入恶意指令：规则可要求访问凭证或外传数据，而代理仍输出看似正确的补丁，传统功能测试难
京公网安备 11000002002063号
本次输入仅包含标题“京公网安备 11000002002063号”，来源标注为 360CERT 安全报告，发布时间为 2026-10-03，但 source_url 实际指向工信部 ICP/IP 地址/域名信息备案管理系统的备案信息查询页面，
（总）网出证（京）字第281号
本次输入来源于360CERT安全报告，但实际提供的URL（https://www.360.cn/licence2.html）和标题（（总）网出证（京）字第281号）显示这是一个中国网络出版许可证页面，而非威胁情报报告。该页面内容为空，没有提
京网文〔2020〕6051-1195号
本次输入并非一篇威胁情报文章，而是 360 官网的一个资质与备案页面。标题「京网文〔2020〕6051-1195号」是北京市网络文化经营许可证（网络文化经营许可证/文网文）的编号形式，来源 URL 为 360.cn 的 licence1.h
京ICP证080047号[京ICP备08010314号-6]
本条情报记录标注来源为 360CERT 安全报告，但标题为『京ICP证080047号[京ICP备08010314号-6]』，这是中国大陆网站的 ICP 备案编号，且 source_url 指向工信部 ICP/IP 地址/域名信息备案管理系统
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation via Contact Identity Rebinding in all versions up to, and ...
CVE-2026-97644
WordPress 插件 Groundhogg（CRM、Newsletters 与 Marketing Automation）在 4.9 及之前的所有版本中存在权限提升漏洞。根因在于 v3 REST 接口中负责创建联系人的 create_c
The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Parameter Key in all versions up to, and including, 8.7.7 due to in...
CVE-2026-92826
WordPress 插件 EWWW Image Optimizer（8.7.7 及之前的所有版本）存在反射型跨站脚本（Reflected XSS）漏洞。根因是该插件对 REQUEST_URI 的『参数键』（parameter key）未做充
The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi...
CVE-2026-92727
CVE-2026-92727 是 WordPress 插件 EmbedPress（官方全称 EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Script...
CVE-2026-96270
Ultimate Member 是 WordPress 平台上使用非常广泛的会员与用户管理插件，集用户资料、注册、登录、会员目录、内容限制与会员体系于一身。CVE-2026-96270 披露该插件在 2.13.1 及之前的所有版本中存在存储