安全日报 - 2026-09-04 - Cyber Security Daily Radar

漏洞预警2026-09-03 发布INFO

Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowing any web page to establish credentialed WebSocket connections to victim appl...

CVE-2026-85183

Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowing any web page to es

历史摘要 · 未重新核验 · NVD

#cve #cwe-1385

漏洞预警2026-09-03 发布INFO

CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set ...

CVE-2026-85181

CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attac

历史摘要 · 未重新核验 · NVD

#cve #cwe-565

漏洞预警2026-09-03 发布INFO

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a man...

CVE-2026-85109

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/f

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-120

漏洞预警2026-09-03 发布INFO

WWBN AVideo contains an authentication failure vulnerability where the video_id_hash credential is a non-expiring, non-revocable bearer token that grants full administrator sess...

CVE-2026-85154

WWBN AVideo contains an authentication failure vulnerability where the video_id_hash credential is a non-expiring, non-r

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-03 发布INFO

A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument topicu...

CVE-2026-85031

A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cste

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-120

漏洞预警2026-09-02 发布INFO

Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-pr...

CVE-2026-19117

Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and

历史摘要 · 未重新核验 · NVD

#cve #cwe-290

漏洞预警2026-09-02 发布INFO

Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authentication and applies a wildc...

CVE-2026-53649

Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-352 #cwe-434 #cwe-942

安全公告2026-09-04 发布INFO

Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。

Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。

历史摘要 · 未重新核验 · 知道创宇 / Seebug

#knownsec #seebug #vulnerability

安全公告2026-09-04 发布INFO

Cookie settings

历史摘要 · 未重新核验 · Mozilla Security Advisories

#mozilla #firefox #browser

安全公告2026-09-04 发布INFO

Mozilla Monitor

历史摘要 · 未重新核验 · Mozilla Security Advisories

#mozilla #firefox #browser

安全公告2026-09-04 发布INFO

The Mozilla Manifesto

历史摘要 · 未重新核验 · Mozilla Security Advisories

#mozilla #firefox #browser

安全公告2026-09-04 发布INFO

Mozilla Foundation

历史摘要 · 未重新核验 · Mozilla Security Advisories

#mozilla #firefox #browser

安全公告2026-09-04 发布INFO

Accessibility Policy

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

#oracle #database #java

安全公告2026-09-04 发布INFO

Create an Account

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

#oracle #database #java

安全公告2026-09-04 发布INFO

Instructions for subscribing to email notifications

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

#oracle #database #java

安全公告2026-09-04 发布INFO