Aggregator

A vulnerability categorized as problematic has been discovered in MervinPraison PraisonAI up to 1.6.77. The affected element is the function execute_tool of the file praisonaiagents.context.fast of the component FastContext Feature. Such manipulation of the argument tool leads to path traversal. This vulnerability is traded as CVE-2026-61432. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in MervinPraison PraisonAI up to 4.6.77. It has been rated as problematic. Impacted is an unknown function of the component ContextGatherer. This manipulation causes path traversal. This vulnerability appears as CVE-2026-61431. The attack requires local access. There is no available exploit.

A vulnerability was found in MervinPraison PraisonAI up to 4.6.77. It has been declared as critical. This issue affects some unknown processing of the component Prompt Injection Defense. The manipulation results in injection. This vulnerability is reported as CVE-2026-60086. The attack can be launched remotely. No exploit exists.

A vulnerability was found in Dell Unisphere for PowerMax up to 10.3.0. It has been classified as very critical. This vulnerability affects unknown code of the component Deserialization. The manipulation leads to deserialization. This vulnerability is documented as CVE-2026-54469. The attack can be initiated remotely. There is not any exploit available.

为在情报学领域深入落实国家人才培养战略，激发大学生对开源情报分析的热情，提升学生在数据采集、深度分析及情报应用等方面的综合能力，特举办“第四届全国大学生开源情报数据采集与分析挑战专项”活动。

特朗普企业2025年获利至少22亿美元。收入对比：2024年总收入约6.22亿美元，2025年跃升至至少22亿美元，增幅超过250%

A vulnerability was found in JetBrains YouTrack up to 2026.2.17011 and classified as problematic. This affects an unknown part of the component Mermaid. Executing a manipulation can lead to injection. This vulnerability is registered as CVE-2026-59791. It is possible to launch the attack remotely. No exploit is available.

A vulnerability has been found in n8n and classified as problematic. Affected by this issue is some unknown functionality of the component Form Node. Performing a manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2026-56354. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in JetBrains IntelliJ IDEA. Affected by this vulnerability is an unknown functionality of the component ID Handler. Such manipulation leads to path traversal. This vulnerability is listed as CVE-2026-59792. The attack must be carried out locally. There is no available exploit.

A vulnerability, which was classified as critical, has been found in n8n. Affected is an unknown function of the component Data-Table File Upload Endpoint. This manipulation causes unrestricted upload. This vulnerability is tracked as CVE-2026-58661. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability classified as critical was found in Vikunja up to 2.2.0. This impacts an unknown function of the component ReadAll Endpoint. The manipulation results in improper authorization. This vulnerability is identified as CVE-2026-56765. The attack can be executed remotely. There is not any exploit available.

A vulnerability classified as critical has been found in ImageMagick up to 7.1.1.x. This affects an unknown function of the component PDB Decoder. The manipulation leads to use after free. This vulnerability is referenced as CVE-2026-56373. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability described as critical has been identified in Capgo up to 12.128.1. The impacted element is an unknown function of the component Configuration. Executing a manipulation can lead to authorization bypass. The identification of this vulnerability is CVE-2026-56335. The attack may be launched remotely. There is no exploit available.

A vulnerability marked as problematic has been reported in ImageMagick up to 7.1.2-17. The affected element is an unknown function of the component META Reader. Performing a manipulation results in memory leak. This vulnerability was named CVE-2026-56366. The attack may be initiated remotely. There is no available exploit.

A vulnerability labeled as problematic has been found in phpMyFAQ up to 4.1.4. Impacted is an unknown function of the file /api/v3 of the component FAQ API Endpoint. Such manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2026-57994. The attack can be launched remotely. No exploit exists.

A vulnerability identified as problematic has been detected in phpMyFAQ up to 4.1.4. This issue affects the function concatenatePaths of the file src/phpMyFAQ/Export/Pdf/Wrapper.php of the component PDF Generation. This manipulation of the argument path causes path traversal. This vulnerability is handled as CVE-2026-57961. The attack can be initiated remotely. There is not any exploit available.

根据发表在《自然》期刊上的一项研究，人形机器人成功完成切除活体动物胆囊的手术。人形机器人并不具有自主能力，它们并不会取代医生，而是由外科医生远超操作。远程操控的人形机器人为活猪完成两例微创胆囊切除手术。如果该方法被证实适用于临床，外科医生就可以利用人形机器人，在资源有限、无法安装专业且昂贵手术机器人的小型医院和诊所远程开展机器人辅助手术。人形机器人相比专业手术机器人更便宜，占用的空间更小，而且易于部署，能部署到从偏远地区到战场甚至太空。研究人员利用宇树科技的 G1 人形机器人。最便宜的 G1 基础型号起售价 13,500 美元，配置灵活机械手以及运费之后费用会超过 6.7 万美元。相比下 Intuitive Surgical 的达芬奇手术机器人费用在 50 万到数百万美元之间。宇树科技机器人的缺陷是需要频繁重校准，耗时更长。

A vulnerability categorized as critical has been discovered in Capgo up to 12.128.1. This vulnerability affects unknown code of the component Parsing. The manipulation results in improper access controls. This vulnerability is known as CVE-2026-56329. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in Crawl4AI up to 0.8.6. It has been rated as problematic. This affects an unknown part of the file /crawl/job of the component Docker API. The manipulation leads to server-side request forgery. This vulnerability is traded as CVE-2026-56261. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in capgo capacitor-updater up to 12.128.1. It has been declared as critical. Affected by this issue is some unknown functionality of the component End-to-End Encryption Scheme. Executing a manipulation can lead to channel accessible by non-endpoint. This vulnerability appears as CVE-2026-56254. The attack may be performed from remote. There is no available exploit.