A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os c...

CVE-2026-120197

A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wap

来源摘录 · NVD / GitHub Advisory

A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in...

CVE-2026-120196

A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/w

来源摘录 · NVD / GitHub Advisory

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the com...

CVE-2026-120195

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the funct

来源摘录 · NVD / GitHub Advisory

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filena...

CVE-2026-120189

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of th

来源摘录 · NVD / GitHub Advisory

**UNSUPPORTED WHEN ASSIGNED**  JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes with no class filter, so an application...

CVE-2026-118636

**UNSUPPORTED WHEN ASSIGNED**  JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject

来源摘录 · NVD / GitHub Advisory

AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers can mint a token with reportCode 'data...

CVE-2026-120209

AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens

来源摘录 · NVD / GitHub Advisory

Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query condition...

CVE-2026-120201

Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gai

来源摘录 · NVD / GitHub Advisory

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and incl...

CVE-2026-118235

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable

来源摘录 · NVD / GitHub Advisory

The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation...

CVE-2026-103882

The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitra

来源摘录 · NVD / GitHub Advisory

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, ...

CVE-2026-89270

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to au

来源摘录 · NVD / GitHub Advisory

The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up ...

CVE-2026-116512

The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress i

来源摘录 · NVD / GitHub Advisory

Manifest-Assisted Retrieval in Artificial Intelligence Search: Evidence Gaps and a Security Evaluation

The external sources retained in our non-systematic audit did not isolate the incremental security or utility effect of

来源摘录 · arXiv cs.CR

The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpbs_action_ajax_calend...

CVE-2026-116557

The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to

来源摘录 · NVD / GitHub Advisory

The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.1.1 via the '...

CVE-2026-109220

The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Inject

来源摘录 · NVD / GitHub Advisory

Is it my preference? Role Grounding Attack against Agent's Memory via Social Interaction

LLM-based agents now share experiences on social platforms and remember new preferences to enhance their performance. Ho

来源摘录 · arXiv cs.CR

A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauthed attacke...

CVE-2026-10579

A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no v

来源摘录 · NVD

A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memor...

CVE-2025-32911

A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function

来源摘录 · NVD

Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network.

CVE-2026-69399

Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network.

来源摘录 · NVD

Reddit to lock content behind logins to fight scrapers

Reddit announced in a post by co-founder Steve Huffman that the site will gradually become a "logged-in service," offeri

来源摘录 · BleepingComputer

From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.

AI-generated vulnerability reports are overwhelming some bug bounty programs, making it harder for aspiring security res

来源摘录 · BleepingComputer