Ivanti warns of Connect Secure zero-day exploited in attacks
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connec
2026-10-14 归档
今日共收录 1875 条安全情报，包含 867 个 CVE，609 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logg
$86 Million Crypto Heist Linked to Ledger Signer Hardware Implant
A small circuit board hidden under the signers’ screens read user data and transmitted it to the attackers. The post $86
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via...
CVE-2026-97668
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication...
CVE-2026-97657
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encrypt
The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to...
CVE-2026-93388
The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file up
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app,...
CVE-2026-110447
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution
The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all...
CVE-2026-110002
The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and incl
The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode...
CVE-2026-92097
The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, an
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation...
CVE-2026-104749
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vuln
Improper neutralization of special elements used in an OS command ('OS command injection')...
CVE-2026-110392
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open
Multiple Kasa devices contain an improper authentication vulnerability in the local device...
CVE-2026-108473
Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unaut
Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote...
CVE-2026-110165
Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially ex
Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
CVE-2026-110149
Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code ou
Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote...
CVE-2026-110152
Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially
Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege Vulnerability
CVE-2026-70179
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr
Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability
CVE-2026-88092
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr
Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability
CVE-2026-70188
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr
Rethinking Quality in Large Language Model Routing: Security-Conditioned Model-and-Budget Selection
Large language model (LLM) routers reduce serving cost by choosing which model to call and how many output tokens to gra
Pin It on Anyone: Certified Targeted Displacement of Multi-Bit LLM Watermarks Without the Key
Multi-bit watermarking embeds a message, typically an account identifier, into LLM output so that harmful text can be tr