Aggregator

Submit #789924 / VDB-358201

A vulnerability categorized as critical has been discovered in dameng100 muucmf 1.9.5.20260309. Impacted is the function getListByPage of the file /index/Search/index.html. Executing a manipulation of the argument keyword can lead to sql injection. This vulnerability appears as CVE-2026-6562. The attack may be performed from remote. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in EyouCMS up to 1.7.1. It has been rated as critical. This issue affects the function edit_adminlogo of the file application/admin/controller/Index.php. Performing a manipulation of the argument filename results in unrestricted upload. This vulnerability is reported as CVE-2026-6561. The attack is possible to be carried out remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #789531 / VDB-358200

Submit #789501 / VDB-358199

一文讲清固态盘恢复原理、禁忌操作和专业流程，看完再也不踩坑！

A vulnerability was found in H3C Magic B0 up to 100R002. It has been declared as critical. This vulnerability affects the function Edit_BasicSSID of the file /goform/aspForm. Such manipulation of the argument param leads to buffer overflow. This vulnerability is documented as CVE-2026-6560. The attack can be executed remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #788038 / VDB-358198

今日暂未更新资讯~
更多最新文章，请访问SecWiki

A vulnerability was found in Wavlink WL-WN579A3 220323. It has been classified as problematic. This affects the function sub_401F80 of the file /cgi-bin/login.cgi. This manipulation of the argument Hostname causes cross site scripting. This vulnerability is registered as CVE-2026-6559. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Submit #788021 / VDB-358197

Submit #785303 / VDB-358196

美军《步兵》《装甲兵》《参数》等刊物2026最新发布的春季刊。

开源软件供应链安全再次拉响警报。近日，安全研究人员发现了一种新型攻击方式。

Attackers abuse QEMU to hide malware in virtual machines, bypass detection, steal data, and deploy ransomware without leaving any trace. Sophos researchers report a rise in attackers abusing QEMU, an open-source emulator, to hide malicious activity inside virtual machines. By running malware in a VM, attackers avoid endpoint security controls and leave minimal traces on […]

Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used JavaScript implementation of Google's Protocol Buffers. [...]