Aggregator

error code: 521

南鸟岛附近海底淤泥中检出多种中重稀土日本海洋研究开发机构24日宣布，深海探测船 “地球” 号在南鸟岛附近深海海底实施的稀土采掘试验中，从采集到的淤泥中检测出多种更珍贵且高科技产品不可或缺的“中重稀土元

当一台机器能在 20 小时内仅凭漏洞描述写出可用的利用代码时，你没法靠打补丁跑赢它。

【火绒安全周报】AI失控后入侵知名企业/韩国外交系统遭黑客攻击

火绒小问答——「企业版」Syslog数据导出

防窃密可溯源 火绒构建终端数据安全审计完整防线

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

2026年了，在AI时代下总感觉什么都有可能，但是看到Wordpress居然能有原生未授权RCE还是感觉不可思议

A vulnerability was found in GeoVision GV-IP Device Utility up to 9.0.7.0 and classified as critical. Affected is an unknown function. Executing a manipulation can lead to uncontrolled search path. This vulnerability is handled as CVE-2026-16519. It is possible to launch the attack on the local host. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in wpmanageninja Fluent Support Plugin up to 2.3.0 on WordPress and classified as problematic. This impacts an unknown function of the component Shortcode Handler. Performing a manipulation of the argument redirect-to results in cross site scripting. This vulnerability is known as CVE-2026-15665. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability, which was classified as problematic, was found in meIsle Visualizer Plugin up to 4.0.5 on WordPress. This affects an unknown function. Such manipulation of the argument backend-title leads to cross site scripting. This vulnerability is traded as CVE-2026-15653. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in ThimPress WP Hotel Booking Plugin up to 2.3.2 on WordPress. The impacted element is an unknown function of the component Shortcode Handler. This manipulation of the argument widget_search causes cross site scripting. This vulnerability appears as CVE-2026-15464. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as problematic was found in cozythemes Cozy Blocks Plugin up to 2.2.11 on WordPress. The affected element is an unknown function. The manipulation results in cross site scripting. This vulnerability is reported as CVE-2026-15334. The attack can be launched remotely. No exploit exists.

A vulnerability classified as problematic has been found in cozythemes Cozy Blocks Plugin up to 2.2.11 on WordPress. Impacted is an unknown function. The manipulation of the argument cozyCustomFont leads to cross site scripting. This vulnerability is documented as CVE-2026-15333. The attack can be initiated remotely. There is not any exploit available.

游戏越做越漂亮。贴图、光追、动效、剧情、过场动画——每一帧都在向"电影感"靠拢。然后某天，看到熟悉的主播，屏幕角落里冒出一行字：「[√] 连接成功」还多了绿色的火柴人……

A vulnerability described as problematic has been identified in 100plugins Open User Map Plugin up to 1.4.45 on WordPress. This issue affects some unknown processing of the component Shortcode Handler. Executing a manipulation of the argument Shortcode can lead to cross site scripting. This vulnerability is registered as CVE-2026-15755. It is possible to launch the attack remotely. No exploit is available.

A vulnerability marked as problematic has been reported in berocket Brands for WooCommerce Plugin up to 3.8.8 on WordPress. This vulnerability affects unknown code of the component Shortcode Handler. Performing a manipulation of the argument width results in cross site scripting. This vulnerability is cataloged as CVE-2026-15648. It is possible to initiate the attack remotely. There is no exploit available.

2026年了，在AI时代下总感觉什么都有可能，但是看到Wordpress居然能有原生未授权RCE还是感觉不可思议。Wordpress算是我曾经深度研究过的php源码之一，虽然wp架构

A vulnerability labeled as problematic has been found in Red Hat OpenShift Update Service and Quay. This affects an unknown part of the component Notification Webhook. Such manipulation leads to server-side request forgery. This vulnerability is listed as CVE-2026-16910. The attack may be performed from remote. There is no available exploit.