2026-10-13 归档

今日共收录 1460 条安全情报,包含 709 个 CVE,466 篇安全通告,以及 13 篇研究论文。

← 返回归档列表
漏洞预警2026-10-12 发布INFO

A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects some unknown processing of the file /auth/realms/default/protocol/openid-connec...

CVE-2026-108809

A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects some unknown processin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file /auth/realms/default/protocol/openid-connect/l...

CVE-2026-108808

A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysql_query of the file source/adminr...

CVE-2026-108807

A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

The Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting it, allowing any authenticated user such as a Subscriber to r...

CVE-2026-84167

The Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting it,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

The Hotel Booking WordPress plugin through 3.8 does not implement CSRF protection on its administrative booking order management, allowing attackers to trick a logged-in adminis...

CVE-2026-84166

The Hotel Booking WordPress plugin through 3.8 does not implement CSRF protection on its administrative booking order ma

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

The WP Comment Cleaner WordPress plugin before 7.2 does not perform a capability check or validate a nonce on one of its bulk comment-deletion routines, allowing authenticated ...

CVE-2026-107791

The WP Comment Cleaner WordPress plugin before 7.2 does not perform a capability check or validate a nonce on one of it

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it is reflected back into an admin-area settings page, allo...

CVE-2025-15703

The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.

CVE-2026-21137

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.

CVE-2026-21125

Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.

CVE-2026-21124

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.

CVE-2026-21122

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.

CVE-2026-21120

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.

CVE-2026-21114

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary c

历史摘要 · 未重新核验 · NVD

威胁情报2026-10-13 发布INFO

抢先加入AI时代顶尖安全团队!阿里云2027届实习生招聘来了!

抢先加入AI时代顶尖安全团队!阿里云2027届实习生招聘来了!

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-10-13 发布INFO

决赛直播|第四届阿里CTF安全挑战赛

决赛直播|第四届阿里CTF安全挑战赛

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-10-13 发布INFO

Control CenterManage your security and delivery services

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-10-13 发布INFO

See all Cybersecurity

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-10-13 发布INFO

Our Infrastructure

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-10-13 发布INFO

OpenClaw安全使用实践指南

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-10-13 发布INFO

关于OpenClaw安全应用的风险提示

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT