#advisory

共收录 23312 条相关情报。

← 返回所有主题
安全公告2026-09-28 发布INFO

A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the...

CVE-2026-100888

A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkim_canon_sel

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function...

CVE-2026-100882

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Web

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the...

CVE-2026-100884

A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to...

CVE-2026-100887

A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to 81bf0b55f5933f3b0dbb15

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown...

CVE-2026-100883

A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file package

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the...

CVE-2026-100889

A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkim_qp_decode of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of...

CVE-2026-100885

A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webku

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue...

CVE-2026-100881

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown proce

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization

CVE-2026-100885

A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webku

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-27 发布INFO

Krayin laravel-crm attachment-download Endpoint acl.php resource injection

CVE-2026-100884

A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-27 发布INFO

Krayin laravel-crm acl.php access control

CVE-2026-100883

A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file package

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-27 发布INFO

Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting

CVE-2026-100882

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Web

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-27 发布INFO

Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the...

CVE-2026-101090

Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboard

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint,...

CVE-2026-101084

obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable...

CVE-2026-101087

Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable notification and DDNS web

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile...

CVE-2026-101089

Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

Nezha is a server and website monitoring tool. In versions >= 2.2.11 and < 2.3.1, the service...

CVE-2026-101088

Nezha is a server and website monitoring tool. In versions >= 2.2.11 and < 2.3.1, the service sentinel worker (service/s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported...

CVE-2026-101086

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing aut

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated...

CVE-2026-101085

Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

Obot before v0.23.0 (affected versions <= v0.22.1) running with OBOT_SERVER_ENABLE_AUTHENTICATION...

CVE-2026-101062

Obot before v0.23.0 (affected versions <= v0.22.1) running with OBOT_SERVER_ENABLE_AUTHENTICATION=true exposes OAuth dyn

历史摘要 · 未重新核验 · GitHub Advisory