Aggregator

美国对白宫电力安全行政令的真正意图，已不止于限制几类进口设备，而是试图把电网控制权、软件更新权、远程运维权和

很多人问这种跨国网络军火交易的新闻,你们到底是怎么查出来的?是不是有内线?

A vulnerability categorized as problematic has been discovered in Saturday Drive Ninja Forms Plugin up to 3.0.3 on WordPress. Impacted is an unknown function of the component Scheduled Exports. The manipulation of the argument interval/format/emailTo results in cross site scripting. This vulnerability is cataloged as CVE-2026-87870. The attack may be launched remotely. There is no exploit available.

致力于第一时间为企业级用户提供权威漏洞情报和有效解决方案。

A vulnerability was found in D-ZERO BurgerEditor up to 3.4.0. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to unrestricted upload. This vulnerability is listed as CVE-2026-84063. The attack may be initiated remotely. There is no available exploit.

老师，您才是全论坛最该加精的，被岁月置顶，被一届届学生收藏，加精理由：受用终身。教师节快乐！

A vulnerability was found in D-ZERO BurgerEditor up to 3.4.0. It has been declared as problematic. This vulnerability affects unknown code. Executing a manipulation can lead to authorization bypass. This vulnerability is tracked as CVE-2026-84062. The attack can be launched remotely. No exploit exists.

《AI +DevOps现状调查报告》连续五年市场应用率第一，持续引领新一代数字供应链安全。

A vulnerability was found in Identrail. It has been classified as critical. This affects the function CompleteGitHubConnection of the file internal/api/github_connect.go of the component GitHub Connection Handler. Performing a manipulation of the argument installation_id results in authorization bypass. This vulnerability is identified as CVE-2026-59185. The attack can be initiated remotely. There is not any exploit available.

2026年9月11日起，欧盟 CRA 的报告义务开始适用。

A vulnerability has been found in ESPHome device-builder and classified as critical. Affected by this vulnerability is an unknown functionality of the component Dashboard. This manipulation causes improper authentication. The identification of this vulnerability is CVE-2026-59177. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability was found in OpenHop and classified as critical. Affected by this issue is the function FlowStore.filePath of the file packages/server/src/store.ts of the component Flow ID File Operations. Such manipulation of the argument ID leads to path traversal. This vulnerability is referenced as CVE-2026-59179. It is possible to launch the attack remotely. No exploit is available.

祝老师们教师节快乐~

A vulnerability, which was classified as critical, was found in addonsorg Drag and Drop File Upload for Elementor Forms Plugin up to 1.6.0 on WordPress. Affected is the function elementor_file_upload. The manipulation of the argument Type results in unrestricted upload. This vulnerability was named CVE-2026-18351. The attack may be performed from remote. There is no available exploit.

A vulnerability, which was classified as problematic, has been found in VMware Workstation. This impacts an unknown function of the component Vmxnet3. The manipulation leads to integer overflow. This vulnerability is uniquely identified as CVE-2026-59346. Local access is required to approach this attack. No exploit exists.

值此第42个教师节，致敬每一位照亮前路的引路人，教师节快乐！

A vulnerability classified as critical was found in GeoNetwork. This affects an unknown function of the file /api/tools/ogc/sld of the component SLD Tooling Endpoint. Executing a manipulation can lead to server-side request forgery. This vulnerability is handled as CVE-2026-55864. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

8月│月报 谛听工控安全月报上线了，工信部的最新政策，月发生的多起工控安全事件，谛听团队收集的最新攻击教据......更多安全资讯，请关注“谛听ditecting",每月更新!

点击获取全套工作流压缩包