今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-116477
A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the fu
CVE-2026-116471
A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file
CVE-2026-116461
A vulnerability was determined in Omega Solution Restro POS up to 20261026. This impacts an unknown function of the file
CVE-2026-116369
A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is the function handleL
CVE-2026-116283
A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the comp
CVE-2026-116280
A vulnerability was determined in Kameleo up to 5.0.1.26. Affected is the function InternalController.TestProxy of the f
CVE-2026-116263
A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the function architect of the f
CVE-2026-116260
A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the f
CVE-2026-116257
A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function processInstall of t
CVE-2026-116254
A vulnerability was identified in rathena FluxCP up to 98cd4b8fd83228c11b36fb3d097b8e0f7c105a8d. This issue affects the
CVE-2026-116219
Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/admin/tools/export.php that lets
CVE-2026-116215
MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated m
CVE-2026-116210
Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that allows remot
CVE-2026-115924
Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled
CVE-2026-115910
Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in social_co
CVE-2026-115906
zip is a zip library for Rust that supports reading and writing simple ZIP files. From 0.6.0 until 9.0.0, the AES entry
CVE-2026-112343
Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to e
CVE-2013-10077
A weakness has been identified in OctoPrint 1.0.0. This impacts the function getSettings of the file src/octoprint/serve
CVE-2026-116236
A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugin_init of th
CVE-2026-116230
A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown