Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server...
CVE-2026-114119
Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that
2026-10-21 归档
今日共收录 2917 条安全情报，包含 2077 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that...
CVE-2026-114108
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated a
Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot...
CVE-2026-114099
Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot-separated ARGS_POST na
Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body...
CVE-2026-114100
Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body processor selection compar
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows...
CVE-2026-114080
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated project me
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows...
CVE-2026-114076
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated tenants to
vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio...
CVE-2026-114052
vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a
vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to...
CVE-2026-114053
vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProces
vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that...
CVE-2026-114055
vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that allows remote clients to
vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no...
CVE-2026-114050
vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache
FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that...
CVE-2026-114044
FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP s
A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the...
CVE-2026-113736
A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap o
Cachet has Stored XSS in Incident Component
CVE-2026-113712
### Summary A stored Cross-Site Scripting (XSS) vulnerability exists in the incident creation form, allowing an authenti
A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix
CVE-2026-111765
The GHSA-9rhm fix added this safe setting in AndroidA2AHttpClient.createConnection(): connection.setInstanceFollowR
A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery
CVE-2026-111761
--- - **Ecosystem:** Maven - **Affected package:** `org.a2aproject.sdk:a2a-java-sdk-server-common` (push-notification d
A2A Java SDK has a fail-open default task authorization
CVE-2026-111764
Draft text for GHSA-qw47-mcm5-934w. The body below drops into the GitHub advisory description field; the metadata block
@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)
CVE-2026-111753
An incomplete fix for [GHSA-58c5-g7wp-6w37](https://github.com/angular/angular/security/advisories/GHSA-58c5-g7wp-6w37)
AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies
CVE-2026-111749
### Summary A subdomain can remove the Host-Only flag from an existing cookie to a parent domain. ### Impact A user a
Firewall for AI
Firewall for AI
[原创]从 REA 的 19 万 Star 说起 — AI 逆向的能力边界与攻防趋势
[原创]从 REA 的 19 万 Star 说起 — AI 逆向的能力边界与攻防趋势