2026-09-18 归档

今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-16 发布INFO

AVideo through 29.0 contains a race condition in the enforceRateLimit() function that fails to atomically increment rate limit counters, allowing attackers to bypass all rate li...

CVE-2026-92583

AVideo through 29.0 contains a race condition in the enforceRateLimit() function that fails to atomically increment rate

历史摘要 · 未重新核验 · NVD

#cve #cwe-307

漏洞预警2026-09-16 发布INFO

AVideo (WWBN/AVideo) through 29.0 (commit e01e41ecc) is vulnerable to cross-site request forgery. objects/videoAddNew.json.php disables AVideo's automatic CSRF guard ($global['s...

CVE-2026-92582

AVideo (WWBN/AVideo) through 29.0 (commit e01e41ecc) is vulnerable to cross-site request forgery. objects/videoAddNew.js

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-09-16 发布INFO

In AVideo through 29.0, Like::__construct() performs counter arithmetic on raw request values before validation, allowing array-typed parameters to desynchronize stored votes fr...

CVE-2026-92581

In AVideo through 29.0, Like::__construct() performs counter arithmetic on raw request values before validation, allowin

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-16 发布INFO

WWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is accepted as a valid login credential through two independent code path...

CVE-2026-92578

WWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is accepted as a

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-16 发布INFO

In AVideo through 29.0, the API get_api_video endpoint contains a broken access control vulnerability in the clean_title branch that returns user-group-restricted videos with ow...

CVE-2026-92577

In AVideo through 29.0, the API get_api_video endpoint contains a broken access control vulnerability in the clean_title

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-16 发布INFO

HKUDS nanobot before 0.3.0 contains a server-side request forgery vulnerability in the WebFetchTool component where the _validate_url() function fails to block internal IP range...

CVE-2026-92576

HKUDS nanobot before 0.3.0 contains a server-side request forgery vulnerability in the WebFetchTool component where the

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-16 发布INFO

A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream `Noelware/docker-manifest-action` used in the release workflow, which is...

CVE-2026-85469

A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream `Noelware/docke

历史摘要 · 未重新核验 · NVD

#cve #cwe-1357

漏洞预警2026-09-16 发布INFO

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, many djust built-in component template tag...

CVE-2026-61597

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-16 发布INFO

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, SSE sessions were keyed solely by a client...

CVE-2026-61592

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-384 #cwe-639 #cwe-862

漏洞预警2026-09-16 发布INFO

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, for views that opt into state snapshots, t...

CVE-2026-61591

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-345 #cwe-915

漏洞预警2026-09-16 发布INFO

changedetection.io through 0.60.6 fails to validate the Goto URL action in browser steps, allowing unauthenticated attackers to access internal addresses. Attackers can supply a...

CVE-2026-92815

changedetection.io through 0.60.6 fails to validate the Goto URL action in browser steps, allowing unauthenticated attac

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-16 发布INFO

changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications, allowing arbitrary markup injection. Attackers can place malicious markup in moni...

CVE-2026-92814

changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications, allowing arbitrary marku

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-16 发布INFO

Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing unauthenticated attackers to reach loopback services. Attack...

CVE-2026-92813

Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing una

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-16 发布INFO

PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in the getUrlByIdWishListAction method, allowing authenticated customers to retrieve share tokens for...

CVE-2026-92810

PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in the getUrlByIdWishListAction method, allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-16 发布INFO

PrestaShop psgdpr versions through 1.4.3 fail to validate that GDPR consent log entries are attributed to the authenticated customer. Authenticated attackers can submit arbitrar...

CVE-2026-92809

PrestaShop psgdpr versions through 1.4.3 fail to validate that GDPR consent log entries are attributed to the authentica

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-16 发布INFO

phpList versions before 3.6.17 fail to validate cross-site request forgery tokens in the mass subscriber removal form handler. Attackers can induce logged-in administrators to v...

CVE-2026-92806

phpList versions before 3.6.17 fail to validate cross-site request forgery tokens in the mass subscriber removal form ha

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-09-16 发布INFO

LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated access to translated files. Attackers can bypass API key req...

CVE-2026-92803

LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated acc

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-16 发布INFO

kan through 0.6.0 fails to properly validate board creation permissions in the GitHub project import endpoint, allowing guests to create boards despite lacking board:create perm...

CVE-2026-92802

kan through 0.6.0 fails to properly validate board creation permissions in the GitHub project import endpoint, allowing

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-16 发布INFO

cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction handler for Feishu interactive card callbacks. Attackers can dispatch agent commands b...

CVE-2026-92801

cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction handler for Feishu interactiv

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-16 发布INFO

Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the backend fetch internal services. Atta...

CVE-2026-92795

Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticate

历史摘要 · 未重新核验 · NVD

#cve #cwe-918