TP-Link多款产品 安全漏洞

TP-Link Tapo L535E are products of the TP-Link company from China. The TP-Link Tapo L535E is a smart color-adjustable LED bulb. The TP-Link Tapo P300 is a smart Wi-Fi multi-port plug-in device. The TP-Link Tapo D100C is a smart video doorbell with a wireless doorbell buzzer. Several TP-Link...

AnythingLLM 后置链接漏洞

AnythingLLM is an integrated AI application developed by Mintplex. Versions of AnythingLLM prior to 1.13.0 contained a post-link vulnerability. This vulnerability stemmed from the file system replication tool only verifying the top-level source and target paths. The recursive replication assistan...

CVE-2026-44720

creationtimestamp| type| source ---|---|--- 2026-05-27 23:48:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuozqgbbg2q...

CVE-2026-45136

creationtimestamp| type| source ---|---|--- 2026-05-27 23:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmunfckcpg2p...

CVE-2026-46538

creationtimestamp| type| source ---|---|--- 2026-05-27 22:52:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmulur5st42p...

CVE-2026-45973

A flaw was found in the Linux kernel's RDMA/mlx5 driver. A race condition during firmware reset in Link Aggregation Group LAG mode can cause the driver to hang indefinitely while waiting for Unregister Memory Region UMR completion during device unload. This can lead to a denial of service, making...

CVE-2026-46027

A flaw was found in the Linux kernel's net/smc component. A remote attacker could exploit this by sending a Connection Less Connection CLC decline message during an early handshake stage. This causes the system to attempt to update link-group level synchronization state before it is properly...

CVE-2026-4390

creationtimestamp| type| source ---|---|--- 2026-05-27 20:21:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmudh4gtow2i...

CVE-2026-9712

creationtimestamp| type| source ---|---|--- 2026-05-27 20:15:46+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mmud5hme4r2y 2026-05-28 00:05:03+00:00| seen| https://bsky.app/profile/nixpkgs-prs-bot.bsky.social/post/3mmupxgygio2d...

GHSA-QC95-4862-92FH Symfony has an HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URL-Parser Differentials and <area> Misclassification

Description symfony/html-sanitizer lets applications sanitise untrusted HTML. The configuration methods allowLinkHosts... and allowLinkSchemes... are intended to restrict targets to an allowlist of hosts/schemes; allowMediaHosts / allowMediaSchemes do the same for etc. Three distinct bypasses all...

CVE-2024-24790

creationtimestamp| type| source ---|---|--- 2026-05-27 19:48:15+00:00| seen| https://bsky.app/profile/andresbohren.bsky.social/post/3mmubm7gb3s22...

CVE-2023-24531

creationtimestamp| type| source ---|---|--- 2026-05-27 19:48:15+00:00| seen| https://bsky.app/profile/andresbohren.bsky.social/post/3mmubm7gb3s22 2026-06-12 13:00:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mo3sbe73cs2x...

CVE-2018-25357

creationtimestamp| type| source ---|---|--- 2026-05-27 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmu3xgipzu2w...

CVE-2026-48053

creationtimestamp| type| source ---|---|--- 2026-05-27 17:45:47+00:00| published-proof-of-concept| https://github.com/learningequality/kolibri/security/advisories/GHSA-4mj9-pf4r-cqrc...

CVE-2026-5509 Arbitrary Command Injection via Browser Developer Console in TP-Link Archer BE450 and BE7200

An authenticated command injection vulnerability exists in the Archer BE450 v1 and BE7200 v1 router that allows an administrator to execute arbitrary system commands through the web management interface. After successfully authenticating to the admin interface, an attacker can leverage the...

CVE-2026-44971

creationtimestamp| type| source ---|---|--- 2026-05-27 17:02:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtyefixwt2n...

CVE-2026-9617

creationtimestamp| type| source ---|---|--- 2026-05-27 16:38:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtwz2lusu2v...

CVE-2026-49982

creationtimestamp| type| source ---|---|--- 2026-05-27 15:48:27+00:00| published-proof-of-concept| https://github.com/raszi/node-tmp/security/advisories/GHSA-7c78-jf6q-g5cm 2026-06-11 18:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnzslz7nzj25 2026-06-15...

CVE-2026-46035

creationtimestamp| type| source ---|---|--- 2026-05-27 15:40:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116647290931030330 2026-07-02 06:48:22+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

EUVD-2026-32257

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR hang in LAG error state unload During firmware reset in LAG mode, a race condition causes the driver to hang indefinitely while waiting for UMR completion during device unload. See 1. In LAG mode the bond devic...