2026-10-06 归档

今日共收录 1258 条安全情报,包含 460 个 CVE,421 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-06 发布INFO

Unauthenticated Broken Access Control in Morning for WooCommerce <= 2.4.1 versions.

CVE-2026-39723

Unauthenticated Broken Access Control in Morning for WooCommerce <= 2.4.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.

CVE-2026-39599

Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.

CVE-2026-32582

Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Customer Insecure Direct Object References (IDOR) in Faktur Pro for WooCommerce <= 3.2.1 versions.

CVE-2026-32576

Customer Insecure Direct Object References (IDOR) in Faktur Pro for WooCommerce <= 3.2.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer...

CVE-2026-105775

A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Handler. Ex...

CVE-2026-105708

A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.

CVE-2026-105072

Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/user_handler.go. The manipulat...

CVE-2026-105707

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery...

CVE-2026-105706

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Execut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/add_drug.php. Performing a manipulation ...

CVE-2026-105705

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument ...

CVE-2026-105704

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/...

CVE-2026-105703

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted elem

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service...

CVE-2026-105621

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/syst...

CVE-2026-105611

A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blad

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblad...

CVE-2026-105610

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the componen...

CVE-2026-105573

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-bo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such mani...

CVE-2026-105572

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/tra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding...

CVE-2026-105571

A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomain_discovery of the file web/reNgine/tasks.py of the component...

CVE-2026-105487

A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomain_di

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manip...

CVE-2026-105486

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/pro

历史摘要 · 未重新核验 · NVD