DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE
CVE-2026-47669
The `unzipDirectory()` function in `packages/api/src/shell/unzipDirectory.js` (line 27) does not validate that extracted
2026-06-06 归档
今日共收录 1443 条安全情报，包含 665 个 CVE，387 篇安全通告，以及 120 篇研究论文。
← 返回归档列表NocoDB: Path Traversal via SQLite Source Filename
CVE-2026-47385
### Summary An authenticated user with base-create permission can attach a SQLite source pointing at an arbitrary file o
NocoDB: SQL Injection via Column Title in Bulk GroupBy
CVE-2026-47384
### Summary An authenticated user with column-create permission can inject SQL into the bulk groupBy endpoint by setting
NocoDB: Stored Cross-Site Scripting via Row Comments
CVE-2026-47383
### Summary An authenticated commenter could store HTML in row comments that executed as script when other users hovered
NocoDB: Cross-Workspace Integration Use in Connection Test
CVE-2026-47381
### Summary A user in one workspace could exercise another workspace's integration through the `testConnection` endpoint
Cookie settings
Cookie settings
Mozilla Monitor
Mozilla Monitor
The Mozilla Manifesto
The Mozilla Manifesto
Mozilla Foundation
Mozilla Foundation
Accessibility Policy
Accessibility Policy
Create an Account
Create an Account
Instructions for subscribing to email notifications
Instructions for subscribing to email notifications
Product Security Home
Product Security Home
Security Bulletins
Security Bulletins
Priority and Severity Ratings
Priority and Severity Ratings
Newsletter Subscription
Newsletter Subscription
Adobe Security Notifications
Adobe Security Notifications
background updates
background updates
update the software on your Apple TV
update the software on your Apple TV
update the software on your Apple Watch
update the software on your Apple Watch