Aggregator

《人工智能安全漏洞治理联盟章程》（以下简称《章程》）于2026年5月26日正式发布。

Хакер пообещал уничтожить репутацию создателей Windows и ушёл собирать компромат до июля.

A vulnerability, which was classified as critical, has been found in code-projects Project Management System 1.0. Affected is an unknown function of the file chk.php of the component Login. The manipulation leads to sql injection. This vulnerability is traded as CVE-2026-9584. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This impacts an unknown function of the file /index.php of the component SQL Handler. Executing a manipulation can lead to information exposure through error message. This vulnerability appears as CVE-2026-9583. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability classified as problematic has been found in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects an unknown function. Performing a manipulation results in cross-site request forgery. This vulnerability is reported as CVE-2026-9582. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability described as critical has been identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access controls. This vulnerability is documented as CVE-2026-9581. The attack can be executed remotely. Additionally, an exploit exists. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in JeecgBoot up to 3.9.1. The affected element is the function LoginController.selectDepart of the file /sys/selectDepart. This manipulation causes improper access controls. This vulnerability is registered as CVE-2026-9580. Remote exploitation of the attack is possible. Furthermore, an exploit is available. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in JeecgBoot up to 3.9.1. Impacted is the function user.getUsername of the file /sys/user/login/setting/userEdit of the component SysUser. The manipulation of the argument userIdentity results in improper access controls. This vulnerability is cataloged as CVE-2026-9579. The attack may be launched remotely. Furthermore, there is an exploit available. The affected component should be upgraded.

Submit #817933 / VDB-365640

Submit #817932 / VDB-365639

Submit #817930 / VDB-365638

Submit #817918 / VDB-365637

Submit #817892 / VDB-365636

Submit #817891 / VDB-365635

科学家首次记录了一次非凡的鲸类迁徙壮举，证实两头座头鲸在澳大利亚东部和巴西的繁殖地之间，穿越了超过 1.4 万公里的海洋。研究人员通过对比数万张座头鲸尾鳍的图像来辨认这些鲸。每头鲸的尾鳍都有独特的斑纹，这使得研究人员能长期追踪并识别个体。2007 年，一头座头鲸在澳大利亚昆士兰州的赫维湾首次被拍到。2013年，它再次出现在同一海域，随后于 2019 年现身巴西圣保罗附近。这些繁殖地之间的最短直线距离约为1.42万公里。第二头座头鲸更令人惊叹。研究人员于2003年首次在巴西阿布洛霍斯礁群——该国主要的座头鲸繁殖地，拍摄到了它的身影。当时它正与由9头成年鲸组成的活跃群体一起游弋。22年后的2025年9月，同一头鲸被发现在澳大利亚赫维湾独自游弋。两次目击地之间的距离达 1.51 万公里，这创下了单头座头鲸已知最远迁徙距离的新纪录。研究基于19283张高质量的鲸照片，这些照片拍摄于1984年至2025年间，采集自澳大利亚东部和拉丁美洲。这些图像既来自专业研究人员，也来自通过全球鲸追踪平台“Happywhale”参与的公民科学家。

A vulnerability identified as critical has been detected in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown processing of the file /admin/modules/class/index.php?view=view. The manipulation of the argument ID leads to sql injection. This vulnerability is listed as CVE-2026-9575. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability categorized as critical has been discovered in itsourcecode Student Transcript Processing System 1.0. This vulnerability affects unknown code of the file /admin/modules/student/trans.php. Executing a manipulation of the argument studentId/cid can lead to sql injection. This vulnerability is tracked as CVE-2026-9574. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability was found in itsourcecode Student Transcript Processing System 1.0. It has been rated as critical. This affects an unknown part of the file /admin/modules/student/index.php?view=view. Performing a manipulation of the argument studentId results in sql injection. This vulnerability is identified as CVE-2026-9573. The attack can be initiated remotely. Additionally, an exploit exists.

Submit #817751 / VDB-362714