Aggregator

A vulnerability categorized as problematic has been discovered in Yoast SEO Plugin up to 27.1.1 on WordPress. This vulnerability affects unknown code of the component Block Attribute Handler. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE-2026-3427. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in SPIP up to 4.4.12. It has been rated as problematic. This affects an unknown part of the component Data Structure Handler. This manipulation causes function call with incorrect variable or reference as argument. This vulnerability is tracked as CVE-2026-33549. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability was found in wpextended The Ultimate WordPress Toolkit Plugin up to 3.2.4 on WordPress. It has been declared as critical. Affected by this issue is the function isDashboardOrProfileRequest of the component Menu Editor Module. The manipulation of the argument $_SERVER['REQUEST_URI'] results in improper privilege management. This vulnerability is identified as CVE-2026-4314. The attack can be executed remotely. There is not any exploit available.

三台电脑+Hyperion，拢住整个智驾行业。

Спрос на взлом iOS и Android привел к стагнации рынка альтернативных киберразработок.

A vulnerability was found in carazo Import and Export Users and Customers Plugin up to 1.29.7 on WordPress. It has been classified as critical. Affected by this vulnerability is the function save_extra_user_profile_fields. The manipulation leads to improper privilege management. This vulnerability is referenced as CVE-2026-3629. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in Red Hat Keycloak. It has been rated as critical. This affects an unknown part of the component Client Configuration Handler. This manipulation causes server-side request forgery. This vulnerability appears as CVE-2026-4366. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in nicolargo glances up to 4.5.1 and classified as problematic. This affects an unknown part of the component REST API. The manipulation results in information disclosure. This vulnerability is cataloged as CVE-2026-32596. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability identified as critical has been detected in lxc incus-os up to 20260314. The impacted element is an unknown function. The manipulation of the argument PCR7 leads to insufficiently protected credentials. This vulnerability is traded as CVE-2026-32606. It is possible to launch the attack on the physical device. There is no exploit available. You should upgrade the affected component.

A vulnerability described as problematic has been identified in CraftCMS azure-blob up to 2.1.0. This affects the function actionLoadContainerData. Executing a manipulation can lead to missing authorization. This vulnerability is handled as CVE-2026-32268. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability classified as problematic was found in Get Use APIs Plugin up to 2.0.9 on WordPress. This issue affects some unknown processing. The manipulation results in cross site scripting. This vulnerability was named CVE-2025-15363. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Phoenix Contact FL SWITCH 2005, FL SWITCH 2008, FL SWITCH 2016, FL SWITCH 2105, FL SWITCH 2108, FL SWITCH 2116, FL SWITCH 2204-2TC-2SFX, FL SWITCH 2205, FL SWITCH 2206-2FX, FL SWITCH 2206-2FX SM, FL SWITCH 2206-2FX SM ST, FL SWITCH 2206-2FX ST, FL SWITCH 2206-2SFX, FL SWITCH 2206-2SFX PN, FL SWITCH 2206C-2FX, FL SWITCH 2207-FX, FL SWITCH 2207-FX SM, FL SWITCH 2208, FL SWITCH 2208 PN, FL SWITCH 2208C, FL SWITCH 2212-2TC-2SFX, FL SWITCH 2214-2FX, FL SWITCH 2214-2FX SM, FL SWITCH 2214-2SFX, FL SWITCH 2214-2SFX PN, FL SWITCH 2216, FL SWITCH 2216 PN, FL SWITCH 2304-2GC-2SFP, FL SWITCH 2306-2SFP, FL SWITCH 2306-2SFP PN, FL SWITCH 2308, FL SWITCH 2308 PN, FL SWITCH 2312-2GC-2SFP, FL SWITCH 2314-2SFP, FL SWITCH 2314-2SFP PN, FL SWITCH 2316, FL SWITCH 2316 PN, FL SWITCH 2404-2TC-2SFX, FL SWITCH 2406-2SFX, FL SWITCH 2406-2SFX PN, FL SWITCH 2408, FL SWITCH 2408 PN, FL SWITCH 2412-2TC-2SFX, FL SWITCH 2414-2SFX, FL SWITCH 2414-2SFX PN, FL SWITCH 2416, FL SWITCH 2416 PN, FL SWITCH 2504-2GC-2SFP, FL SWITCH 2506-2SFP, FL SWITCH 2506-2SFP PN, FL SWITCH 2508, FL SWITCH 2508 PN, FL SWITCH 2512-2GC-2SFP, FL SWITCH 2514-2SFP, FL SWITCH 2514-2SFP PN, FL SWITCH 2516, FL SWITCH 2516 PN, FL SWITCH 2608, FL SWITCH 2608 PN, FL SWITCH 2708, FL SWITCH 2708 PN, FL SWITCH 2303-8SP1, FL NAT 2008, FL NAT 2208, FL NAT 2304-2GC-2SFP, FL SWITCH 2008F, K1, FL SWITCH TSN 2316, FL SWITCH TSN 2312-2GC-2SFP, FL SWITCH TSN 2314-2SFP, FL SWITCH 5924-4GC, FL SWITCH 5916-8GC-4SFP+, FL SWITCH 5924SFP-4GC, FL SWITCH 5924-4SFP+ and FL SWITCH 5916SFP-8GC-4SFP+ up to 3.52. Impacted is an unknown function of the component HTTP Handler. This manipulation causes command injection. The identification of this vulnerability is CVE-2026-22317. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability has been found in alhadeff Writeprint Stylometry Plugin up to 0.1 on WordPress and classified as problematic. The impacted element is the function bjl_wprintstylo_comments_nav of the component GET Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. This vulnerability is identified as CVE-2026-3512. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Phoenix Contact FL SWITCH 2005, FL SWITCH 2008, FL SWITCH 2016, FL SWITCH 2105, FL SWITCH 2108, FL SWITCH 2116, FL SWITCH 2204-2TC-2SFX, FL SWITCH 2205, FL SWITCH 2206-2FX, FL SWITCH 2206-2FX SM, FL SWITCH 2206-2FX SM ST, FL SWITCH 2206-2FX ST, FL SWITCH 2206-2SFX, FL SWITCH 2206-2SFX PN, FL SWITCH 2206C-2FX, FL SWITCH 2207-FX, FL SWITCH 2207-FX SM, FL SWITCH 2208, FL SWITCH 2208 PN, FL SWITCH 2208C, FL SWITCH 2212-2TC-2SFX, FL SWITCH 2214-2FX, FL SWITCH 2214-2FX SM, FL SWITCH 2214-2SFX, FL SWITCH 2214-2SFX PN, FL SWITCH 2216, FL SWITCH 2216 PN, FL SWITCH 2304-2GC-2SFP, FL SWITCH 2306-2SFP, FL SWITCH 2306-2SFP PN, FL SWITCH 2308, FL SWITCH 2308 PN, FL SWITCH 2312-2GC-2SFP, FL SWITCH 2314-2SFP, FL SWITCH 2314-2SFP PN, FL SWITCH 2316, FL SWITCH 2316 PN, FL SWITCH 2404-2TC-2SFX, FL SWITCH 2406-2SFX, FL SWITCH 2406-2SFX PN, FL SWITCH 2408, FL SWITCH 2408 PN, FL SWITCH 2412-2TC-2SFX, FL SWITCH 2414-2SFX, FL SWITCH 2414-2SFX PN, FL SWITCH 2416, FL SWITCH 2416 PN, FL SWITCH 2504-2GC-2SFP, FL SWITCH 2506-2SFP, FL SWITCH 2506-2SFP PN, FL SWITCH 2508, FL SWITCH 2508 PN, FL SWITCH 2512-2GC-2SFP, FL SWITCH 2514-2SFP, FL SWITCH 2514-2SFP PN, FL SWITCH 2516, FL SWITCH 2516 PN, FL SWITCH 2608, FL SWITCH 2608 PN, FL SWITCH 2708, FL SWITCH 2708 PN, FL SWITCH 2303-8SP1, FL NAT 2008, FL NAT 2208, FL NAT 2304-2GC-2SFP, FL SWITCH 2008F, K1, FL SWITCH TSN 2316, FL SWITCH TSN 2312-2GC-2SFP, FL SWITCH TSN 2314-2SFP, FL SWITCH 5924-4GC, FL SWITCH 5916-8GC-4SFP+, FL SWITCH 5924SFP-4GC, FL SWITCH 5924-4SFP+ and FL SWITCH 5916SFP-8GC-4SFP+ up to 3.52 and classified as critical. This affects an unknown function of the component POST Parameter Handler. Executing a manipulation can lead to stack-based buffer overflow. This vulnerability is tracked as CVE-2026-22318. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in Dahua NVR2-4KS3, XVR4232AN-I, T and XVR1B16H-I. This vulnerability affects unknown code. Executing a manipulation can lead to authentication bypass by primary weakness. This vulnerability appears as CVE-2025-31703. The physical device can be targeted for the attack. There is no available exploit.

A vulnerability marked as critical has been reported in Phoenix Contact FL SWITCH 2005, FL SWITCH 2008, FL SWITCH 2016, FL SWITCH 2105, FL SWITCH 2108, FL SWITCH 2116, FL SWITCH 2204-2TC-2SFX, FL SWITCH 2205, FL SWITCH 2206-2FX, FL SWITCH 2206-2FX SM, FL SWITCH 2206-2FX SM ST, FL SWITCH 2206-2FX ST, FL SWITCH 2206-2SFX, FL SWITCH 2206-2SFX PN, FL SWITCH 2206C-2FX, FL SWITCH 2207-FX, FL SWITCH 2207-FX SM, FL SWITCH 2208, FL SWITCH 2208 PN, FL SWITCH 2208C, FL SWITCH 2212-2TC-2SFX, FL SWITCH 2214-2FX, FL SWITCH 2214-2FX SM, FL SWITCH 2214-2SFX, FL SWITCH 2214-2SFX PN, FL SWITCH 2216, FL SWITCH 2216 PN, FL SWITCH 2304-2GC-2SFP, FL SWITCH 2306-2SFP, FL SWITCH 2306-2SFP PN, FL SWITCH 2308, FL SWITCH 2308 PN, FL SWITCH 2312-2GC-2SFP, FL SWITCH 2314-2SFP, FL SWITCH 2314-2SFP PN, FL SWITCH 2316, FL SWITCH 2316 PN, FL SWITCH 2404-2TC-2SFX, FL SWITCH 2406-2SFX, FL SWITCH 2406-2SFX PN, FL SWITCH 2408, FL SWITCH 2408 PN, FL SWITCH 2412-2TC-2SFX, FL SWITCH 2414-2SFX, FL SWITCH 2414-2SFX PN, FL SWITCH 2416, FL SWITCH 2416 PN, FL SWITCH 2504-2GC-2SFP, FL SWITCH 2506-2SFP, FL SWITCH 2506-2SFP PN, FL SWITCH 2508, FL SWITCH 2508 PN, FL SWITCH 2512-2GC-2SFP, FL SWITCH 2514-2SFP, FL SWITCH 2514-2SFP PN, FL SWITCH 2516, FL SWITCH 2516 PN, FL SWITCH 2608, FL SWITCH 2608 PN, FL SWITCH 2708, FL SWITCH 2708 PN, FL SWITCH 2303-8SP1, FL NAT 2008, FL NAT 2208, FL NAT 2304-2GC-2SFP, FL SWITCH 2008F, K1, FL SWITCH TSN 2316, FL SWITCH TSN 2312-2GC-2SFP, FL SWITCH TSN 2314-2SFP, FL SWITCH 5924-4GC, FL SWITCH 5916-8GC-4SFP+, FL SWITCH 5924SFP-4GC, FL SWITCH 5924-4SFP+ and FL SWITCH 5916SFP-8GC-4SFP+ up to 3.52. This issue affects some unknown processing of the component WebUI. The manipulation leads to stack-based buffer overflow. This vulnerability is traded as CVE-2026-22316. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability classified as critical has been found in Kanboard up to 1.2.50. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in sql injection. This vulnerability was named CVE-2026-33058. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in nicolargo glances up to 4.5.1. This vulnerability affects the function secure_popen. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2026-32608. Local access is required to approach this attack. No exploit exists. It is recommended to upgrade the affected component.

九垠赢系统代码审计

网上没看到此漏洞的分析，所以自己分析看看何意味