最新预警列表

重置
严重 高危 国内 Linux 发行版 云厂商 主机安全 开源社区 云原生 漏洞数据库 官方通告 已被利用 漏洞预警 CVE 官方源 厂商通告 PSIRT 网络设备 DDoS 攻击情报 厂商报告 NVD Recent openEuler 安全公告 OSV CISA KEV Cisco PSIRT CERT/CC VU CERT-EU Huawei PSIRT Cloudflare DDoS 阿里云 Alibaba Cloud Linux 安全公告
CRITICAL NVD Recent 2026-09-09

CVE-2026-78997：UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulner

UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL

查看官方参考
MEDIUM NVD Recent 2026-09-09

CVE-2026-43645：Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

查看官方参考
MEDIUM NVD Recent 2026-09-09

CVE-2026-43635：Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

查看官方参考
MEDIUM NVD Recent 2026-09-09

CVE-2026-34412：Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

查看官方参考
MEDIUM NVD Recent 2026-09-09

CVE-2026-28523：Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

查看官方参考
MEDIUM NVD Recent 2026-09-09

CVE-2026-26350：Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

查看官方参考
MEDIUM NVD Recent 2026-09-09

CVE-2026-24442：Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

查看官方参考
CRITICAL NVD Recent 2026-09-09

CVE-2026-79570：mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbCon

mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.

查看官方参考
CRITICAL NVD Recent 2026-09-09

CVE-2026-79569：Movie_Recommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore. Th

Movie_Recommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.

查看官方参考
MEDIUM NVD Recent 2026-09-09

CVE-2026-50980：Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote

Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record

查看官方参考
HIGH NVD Recent 2026-09-09

CVE-2025-56798：Cross-Site Request Forgery (CSRF) vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows

Cross-Site Request Forgery (CSRF) vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy.

查看官方参考
MEDIUM NVD Recent 2026-09-09

CVE-2026-16180：IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 1

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service condition due to improper validation of

查看官方参考
CRITICAL NVD Recent 2026-09-09

CVE-2026-86480：In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser pri

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges

查看官方参考
HIGH NVD Recent 2026-09-09

CVE-2026-86479：In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restric

In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restricted REST API resources via IDOR

查看官方参考
CRITICAL NVD Recent 2026-09-09

CVE-2026-86478：In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthent

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address

查看官方参考

站内所有资源、漏洞预警、工具与专题内容仅面向企业授权自测、合规研究与安全运维使用。本站不提供可直接用于非法攻击的程序、载荷或黑产平台入口。