Aggregator

从 开源项目JustSoc 学习态势感知的原理

先知技术社区
6 hours 8 minutes ago
本文以轻量级开源态势感知平台 JustSoc 为例，拆解一条安全告警从流量采集、规则初筛、二次分析、消息传输、存储检索到平台展示和研判的完整链路，帮助读者从工程链路角度理解态势感知平台如何真正运转。

CVE-2026-52715 漏洞复现：GEO my WordPress 未授权 SQL 注入

先知技术社区
6 hours 13 minutes ago
GEO my WordPress 是一款拥有 60,000+ 安装量的 WordPress 地理位置插件，支持按地理位置搜索、筛选和展示文章/用户。2026 年 6 月，该插件 ≤ 4.5.5 版本被披露存在一个 CVSS 9.3 的严重漏洞（CVE-2026-52715），其 `gmw_get_locations_within_boundaries_sql()` 函数将用户控制的 URL 参数直

INC

Dark Feed IO
7 hours 14 minutes ago

You must login to view this content

cohenido

INC

Dark Feed IO
10 hours 12 minutes ago

You must login to view this content

cohenido

CVE-2026-5051 | HashiCorp Vault/Vault Enterprise up to 2.0.0 Audit Device path traversal (EUVD-2026-41098)

VulDB Recent Entries
13 hours 10 minutes ago
A vulnerability marked as critical has been reported in HashiCorp Vault and Vault Enterprise up to 2.0.0. This impacts an unknown function of the component Audit Device Handler. The manipulation leads to path traversal. This vulnerability is traded as CVE-2026-5051. Access to the local network is required for this attack to succeed. There is no exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-58521 | Wikimedia Mediawiki up to 1.43.8/1.44.5/1.45.3 sql injection (EUVD-2026-41102)

VulDB Recent Entries
13 hours 10 minutes ago
A vulnerability labeled as critical has been found in Wikimedia Mediawiki up to 1.43.8/1.44.5/1.45.3. This affects an unknown function. Executing a manipulation can lead to sql injection. This vulnerability appears as CVE-2026-58521. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.
vuldb.com

CVE-2026-57737 | Averta Shortcodes and Extra Features for Phlox Theme up to 2.17.16 on WordPress cross site scripting (EUVD-2026-41105)

VulDB Recent Entries
13 hours 11 minutes ago
A vulnerability identified as problematic has been detected in Averta Shortcodes and Extra Features for Phlox Theme up to 2.17.16 on WordPress. The impacted element is an unknown function. Performing a manipulation results in cross site scripting. This vulnerability is reported as CVE-2026-57737. The attack is possible to be carried out remotely. No exploit exists.
vuldb.com

CVE-2026-57736 | HubSpot Plugin up to 11.3.51 on WordPress insertion of sensitive information into sent data (EUVD-2026-41104)

VulDB Recent Entries
13 hours 11 minutes ago
A vulnerability categorized as problematic has been discovered in HubSpot Plugin up to 11.3.51 on WordPress. The affected element is an unknown function. Such manipulation leads to insertion of sensitive information into sent data. This vulnerability is documented as CVE-2026-57736. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2026-57723 | e4jvikwp VikBooking Hotel Booking Engine & PMS Plugin up to 1.8.12 on WordPress cross-site request forgery (EUVD-2026-41097)

VulDB Recent Entries
13 hours 11 minutes ago
A vulnerability was found in e4jvikwp VikBooking Hotel Booking Engine & PMS Plugin up to 1.8.12 on WordPress. It has been rated as problematic. Impacted is an unknown function. This manipulation causes cross-site request forgery. This vulnerability is registered as CVE-2026-57723. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com

Managed ad