Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta...
CVE-2026-115993
Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker t
2026-10-25 归档
今日共收录 737 条安全情报，包含 0 个 CVE，411 篇安全通告，以及 64 篇研究论文。
← 返回归档列表Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object...
CVE-2026-114196
Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object Injection.This issue aff
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-112866
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-111402
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software
The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link...
CVE-2026-112207
The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link belongs to the site be
The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour...
CVE-2026-114429
The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotspot content before st
The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine...
CVE-2026-110956
The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor before auth
The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.3 does not perform a...
CVE-2026-105199
The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.3 does not perform a capability check in one of its A
The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection...
CVE-2026-115806
The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,
Postiz lets a signed-in user ask the backend to run a function on one of their connected channels...
CVE-2026-115931
Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not r
LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores
CVE-2026-115883
### Summary The Postgres and SQLite stores save a namespace as its labels joined with `.`, so `("tenant", "bob")` and `
Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
CVE-2026-115889
## Summary In Wasmtime prior to v43, the Cranelift compiler backend bit-packs its SSA value indices in a way that can r
filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse
CVE-2026-112906
`SoftFileLock` and `MarkerSoftFileLock` evict an unparsable marker (the lock file at ``, whose presence says a process h
filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory
CVE-2026-112914
When a soft-lock stale break finds that the marker (the lock file at ``) it renamed aside was a live one recreated by a
WildFakeToolBench: Benchmarking AI-Generated Image Detectors with Web-Sourced Image Processing
As AI generated images are getting popular these days, discussions on such generations are widely existed in current pub
Your Token Is Gone: A Token-Consumption Countermeasure for Disrupting LLM-Based Scam Systems
LLM-based scam systems increasingly combine adaptive dialogue, persistent context, external tools, and multi-agent coord
JANUS: Agentic Cross-Language Fuzzing Harness Generation for Android Native Libraries
Modern Android apps extensively rely on native libraries, bridging Java/Kotlin and C/C++ through the Java Native Interfa
Cloud & Application Security
Cloud & Application Security
Next-Gen Identity Security
Next-Gen Identity Security
cloud architecture assessment
cloud architecture assessment