共收录 1614 条相关情报。
← 返回所有主题CVE-2026-11456
A vulnerability was identified in Chanjet CRM 1.0. This affects an unknown part of the file /tools/jxf_dump_systable.php
CVE-2026-11455
A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. Affected by this issue is the function check_cmd
CVE-2026-11451
A flaw has been found in GL.iNet GL-MT3000 4.4.5. This impacts the function snprintf of the file /cgi-bin/glc of the com
CVE-2026-11452
A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function FUN_0042e200 of the file /cgi-
CVE-2026-11453
A vulnerability was found in Tiobon Employee Self-Service System up to 7.2. Affected by this vulnerability is an unknown
CVE-2026-11453
该漏洞影响 Tiobon Employee Self-Service System（员工自助服务系统）至 7.2 版本。漏洞存在于组件 Login Endpoint 的 /Blog/BlogSearch.aspx 文件中，攻击者可通过操纵
CVE-2026-11452
GL.iNet GL-MT3000路由器固件版本4.4.5及之前存在命令注入漏洞。漏洞位于/cgi-bin/glc文件的SET_USER_PWD处理器函数FUN_0042e200中，攻击者可通过远程发送特制的Password参数，实现命令注
CVE-2026-11451
CVE-2026-11451 是 GL.iNet GL-MT3000 路由器固件 4.4.5 中的一个远程命令注入漏洞。漏洞存在于 /cgi-bin/glc 文件的 FTP 协议处理器组件中，具体位于 snprintf 函数。攻击者可以通过
CVE-2026-11449
A security vulnerability has been detected in GL.iNet GL-MT3000 4.4.5. The impacted element is the function rpc_sys of t
CVE-2026-11447
A security flaw has been discovered in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function iwinfo_backend of the fil
CVE-2026-11448
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the fi
CVE-2026-11450
A vulnerability was detected in GL.iNet GL-MT3000 4.4.5. This affects the function dlopen in the library /usr/lib/oui-ht
CVE-2026-11450
CVE-2026-11450 是影响 GL.iNet GL-MT3000 路由器（固件版本 4.4.5）的一个命令注入漏洞。漏洞位于 /usr/lib/oui-httpd/rpc/ 库的 dlopen 函数中，属于路径规范化处理组件。攻击者
CVE-2026-11449
GL.iNet GL-MT3000路由器固件版本4.4.5中存在一个命令注入漏洞（CVE-2026-11449），位于LuCI JSON-RPC接口的/cgi-bin/luci/rpc文件中的rpc_sys函数。攻击者可以远程利用该漏洞，通
CVE-2026-11448
GL.iNet GL-MT3000 路由器（固件版本 ≤ 4.4.5）的 Minidlna 服务中存在一处命令注入漏洞。漏洞位于 /rpc 文件的 realpath 函数中，通过操控参数 kube.set，攻击者可在无需身份验证（但 CVS
CVE-2026-11447
该漏洞存在于GL.iNet GL-MT3000路由器（固件版本4.4.5及之前）的MTK后端组件中，具体位于iwinfo.so文件的iwinfo_backend函数。攻击者可通过操控该函数的device参数实现命令注入，从而在设备上执行任意
CVE-2026-11435
A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan
CVE-2026-11435
CVE-2026-11435 是 Jinher OA 1.0 中的一个 SQL 注入漏洞。漏洞位于文件 nextselectplan.aspx 的未知函数中，攻击者可以通过参数 httpOID 实施 SQL 注入攻击。该漏洞允许远程、未经身
CVE-2026-11406
A vulnerability was determined in GL.iNet MT3000 up to 4.4.5. This vulnerability affects unknown code of the file ovpncl
CVE-2026-11412
A weakness has been identified in Jinher OA C6. The affected element is an unknown function of the file /C6/JHSoft.Web.M