共计 187 篇文章

---

2025

07-22

Kyverno's Improper JMESPath Variable Evaluation Lead to Denial of Service

07-22

The bSecure plugin for WordPress is vulnerable to Privilege Escalation due to missing

07-22

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

07-22

The Website Contact Form With File Upload plugin for WordPress is vulnerable to arbitrary file

07-22

The FoxyPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file

07-21

LibreNMS has Authenticated Local File Inclusion in ajax_formphp that Allows RCE

07-21

pyLoad has Path Traversal Vulnerability in json/upload Endpoint that allows Arbitrary File Write

07-21

Starlette has possible denial-of-service vector when parsing large files in multipart forms

07-21

Nokogiri patches vendored libxml2 to resolve multiple CVEs

07-21

Dolibarr has Remote Code Execution Vulnerability (Bypass)