2026-10-05 归档

今日共收录 815 条安全情报,包含 115 个 CVE,364 篇安全通告,以及 81 篇研究论文。

← 返回归档列表
安全公告2026-10-04 发布INFO

A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown...

CVE-2026-105149

A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /st

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-04 发布INFO

A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the...

CVE-2026-105147

A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Ha

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-04 发布INFO

A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown...

CVE-2026-105148

A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shar

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-04 发布INFO

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator...

CVE-2026-97307

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculato

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-04 发布INFO

A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is...

CVE-2026-105145

A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function get_environ

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-04 发布INFO

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected...

CVE-2026-105146

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the fu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-04 发布INFO

A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is...

CVE-2026-105141

A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function get_user_id_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-04 发布INFO

The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored...

CVE-2026-97332

The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-04 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...

CVE-2026-97276

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Stat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-04 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...

CVE-2026-103344

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-04 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...

CVE-2026-103354

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-04 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...

CVE-2026-103062

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Transla

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-04 发布INFO

The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly...

CVE-2026-86817

The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly restrict the callbacks used to

历史摘要 · 未重新核验 · GitHub Advisory

学术论文2026-10-01 发布INFO

System-Level Optimization Beyond Cryptographic Kernels: An ML-KEM Case Study on Arm Cortex-M7

该研究关注嵌入式后量子密码(PQC)实现中的性能优化层次问题。此前学术界与工业界的相关工作主要聚焦于指令级优化,例如算术内核改进、汇编级调优、寄存器分配以及指令调度,其中 SLOTHY 超级优化器生成的 ML-KEM 实现代表了当前较先进的

历史摘要 · 未重新核验 · arXiv cs.CR

威胁情报2026-10-05 发布INFO

京ICP证080047号[京ICP备08010314号-6]

本条情报的输入内容不构成一份可分析的安全情报。标题仅为『京ICP证080047号[京ICP备08010314号-6]』,这是网站ICP备案编号,属于中国大陆网站合规登记的标识信息;source_url 指向工业和信息化部政务服务平台备案系统

历史摘要 · 未重新核验 · 360CERT 安全报告

漏洞预警2026-10-05 发布HIGH

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects so...

CVE-2026-105229

CVE-2026-105229 披露的是开源项目 kishor-23/food-waste-management-system(一个食物浪费管理平台)中的一处 SQL 注入弱点,位于 User Registration Endpoint 组

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布MEDIUM

A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component N...

CVE-2026-105226

CVE-2026-105226 影响 osCommerce 旗下的开源电商系统 osCommerce2,受影响范围为 2.3.4.1 及更早版本。漏洞位于后台新闻通讯管理组件(Newsletter Management)对应的文件 admi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布MEDIUM

A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file includes/classes/payment.php of the component Payment Page....

CVE-2026-105225

osCommerce 2 (版本至 2.3.4.1) 的支付组件存在代码注入漏洞,位于文件 includes/classes/payment.php 的 include 函数中。攻击者可以通过操控 MODULE_PAYMENT_INSTAL

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布MEDIUM

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads...

CVE-2026-105187

该漏洞影响 itsourcecode 出品的 Online Admission System 1.0(一套基于 PHP 的在线招生/入学报名管理系统,常被学校、培训机构及中小型机构部署用于在线提交与审核入学申请)。问题出在后台脚本 /adm

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布MEDIUM

A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid can le...

CVE-2026-105186

NVD 收录 CVE-2026-105186,影响 itsourcecode 出品的 Online Admission System(在线招生/录取系统)1.0 版本。漏洞位于该系统根目录下的 /new.php 文件,涉及一个未被公开命名的

历史摘要 · 未重新核验 · NVD