今日共收录 1127 条安全情报，包含 372 个 CVE，412 篇安全通告，以及 88 篇研究论文。
← 返回归档列表CVE-2026-108707
Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthentic
CVE-2026-81797
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.
CVE-2026-78535
Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.
CVE-2026-78533
Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.
CVE-2026-78531
Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.
CVE-2026-78529
Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.
CVE-2026-66569
Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.
CVE-2026-66568
Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.
CVE-2026-66567
Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.
CVE-2026-66565
Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.
CVE-2026-66564
Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.
CVE-2026-66563
Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.
CVE-2026-66483
Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
CVE-2026-66482
Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
CVE-2026-62129
Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
CVE-2026-62125
Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.
CVE-2026-62124
Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.
CVE-2026-62123
Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.
CVE-2026-62120
Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.
CVE-2026-62090
Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.