The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its...
CVE-2026-92431
The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowin
2026-10-18 归档
今日共收录 723 条安全情报，包含 0 个 CVE，397 篇安全通告，以及 78 篇研究论文。
← 返回归档列表The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination...
CVE-2026-92432
The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, al
The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the...
CVE-2026-97314
The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its l
Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)
CVE-2026-96627
## Summary A user holding the delegated `users:update` permission can reset the global administrator's password and take
Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination
CVE-2026-58494
## Summary Wasmtime's WASI filesystem implementation lets a guest with a read-only source file capability overwrite tha
JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS
CVE-2026-102834
### Summary `IPCameraFrameGrabber` parses the `Content-Length` value from the multipart MJPEG HTTP stream returned by th
Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution
CVE-2026-96620
The Claude Agent SDK for Python passed the `resume` option to the Claude CLI without validation, allowing a value beginn
CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
CVE-2026-62994
### Summary A network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic when CoreDNS is configu
ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)
CVE-2026-76894
## Summary The MCP Apps UI resource (an interactive DataStore table rendered in the host's webview/iframe) communicates
swoosh has email-derived URL path injection in Microsoft Graph endpoint
CVE-2026-54893
### Summary `Swoosh.Adapters.MsGraph` builds its Microsoft Graph API request URL by interpolating the sender's email ad
ClickMigrate has Path Traversal in "revision -m" argument
CVE-2026-68549
### Impact A path traversal vulnerability in the `revision` command allowed a crafted migration name supplied via the `-
京ICP证080047号[京ICP备08010314号-6]
京ICP证080047号[京ICP备08010314号-6]
京网文〔2020〕6051-1195号
京网文〔2020〕6051-1195号
（总）网出证（京）字第281号
（总）网出证（京）字第281号
京公网安备 11000002002063号
京公网安备 11000002002063号
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Cloud ManagerManage your cloud computing services
Cloud ManagerManage your cloud computing services
See all Cloud Computing
See all Cloud Computing
智利银行在勒索软件攻击后关闭所有分行
智利银行在勒索软件攻击后关闭所有分行
Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019
Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019