22012 matches found
Tornado 资源管理错误漏洞
Tornado is a Python web framework and asynchronous networking library from Tornado China. This library can scale to thousands of open connections by using non-blocking network I/O, making it ideal for applications that require long-term polling, WebSocket, and other scenarios where long-term...
PT-2026-24585
🚨 CVE-2026-1867 The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting...
PT-2026-24516
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...
PT-2026-24541
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...
Zoom Rooms for Windows 安全漏洞
Zoom Rooms for Windows is a meeting software developed by the American company Zoom. Versions of Zoom Rooms for Windows prior to 6.6.5 contained a security vulnerability. This vulnerability stemmed from improper input validation in the kiosk mode, which could allow authenticated users to elevate...
PT-2026-24708
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to cause a denial of service condition due to improper input validation on webhook custom header names under...
PT-2026-24510
Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.23 and earlier Description A stored Cross-Site Scripting XSS issue exists in Adobe Experience Manager. An attacker could inject malicious scripts into vulnerable form fields. Execution of malicious...
PT-2026-24543
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...
WordPress Core <= 6.9.3 - XML External Entity (XXE) vulnerability
XML External Entity XXE vulnerability discovered by Youssef Achtatal in WordPress core versions = 6.9.3...
WordPress 6.9-6.9.3 - Broken Access Control in Notes vulnerability
Broken Access Control in Notes vulnerability discovered by kaminuma in WordPress core versions 6.9-6.9.3...
CVE-2026-23113 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23113 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2026-23209 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23209 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2025-38011 affecting package kernel for versions less than 6.6.126.1-1
CVE-2025-38011 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2025-71235 affecting package kernel for versions less than 6.6.126.1-1
CVE-2025-71235 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2026-23075 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23075 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2026-23125 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23125 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2026-22998 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-22998 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2026-23164 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23164 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...