2026-10-30 归档

今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。

漏洞预警2026-10-28 发布CRITICAL

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the `excerpt-include` macro does not properly...

CVE-2026-44179

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 un

来源摘录 · NVD

#cve #cwe-95

漏洞预警2026-10-29 发布CRITICAL

A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code executi...

CVE-2026-42922

A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially

来源摘录 · NVD

#cve #cwe-285

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.

CVE-2026-62014

Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.

CVE-2026-62011

Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.

CVE-2026-62010

Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.

CVE-2026-62009

Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.

CVE-2026-62005

Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.

CVE-2026-62004

Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Mission <= 1.22 versions.

CVE-2026-62003

Unauthenticated PHP Object Injection in Mission <= 1.22 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.

CVE-2026-61998

Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.

CVE-2026-61997

Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions.

CVE-2026-61992

Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions.

CVE-2026-61991

Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions.

来源摘录 · NVD

#cve #cwe-94

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.

CVE-2026-54860

Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.

CVE-2026-54857

Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.

CVE-2026-54856

Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-24 发布CRITICAL

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the compo...

CVE-2026-115995

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the f

来源摘录 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-10-27 发布CRITICAL

Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page...

CVE-2026-118305

Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute a

来源摘录 · NVD

#cve #cwe-119

漏洞预警2026-10-27 发布CRITICAL

Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pa...

CVE-2026-118306

Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute

来源摘录 · NVD

#cve #cwe-119

漏洞预警2026-10-27 发布CRITICAL

Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chrom...

CVE-2026-118308

Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary

来源摘录 · NVD

#cve #cwe-416