CVE-2026-118132
CVE-2026-118132
NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsa
2026-10-28 归档
今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Neko: Authorization bypass in legacy WebRTC input handling
CVE-2026-116679
Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deploy
Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
CVE-2026-116676
Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0
3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share
CVE-2026-104189
The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file
@fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 through 4.0.8, when Fastify runs with the non-default ignoreDuplicateSlashes ...
CVE-2026-112362
@fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 through 4.0.8, when
A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This manipulation causes command injection....
CVE-2026-116506
A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
【EdgeOne】关于针对 PHP 核心远程代码执行漏洞的防护公告
【EdgeOne】关于针对 PHP 核心远程代码执行漏洞的防护公告
【腾讯云 EdgeOne】关于中国大陆网络优化计费项名称变更的公告
【腾讯云 EdgeOne】关于中国大陆网络优化计费项名称变更的公告
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization
CVE-2026-116675
### Impact Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via elements crafted thr
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4
Android Code Search
Android Code Search
Secure an Android device
Secure an Android device