2026-09-18 归档

今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-17 发布INFO

vm2 versions from 3.11.3 before 3.11.7 expose the host tls module to NodeVM sandbox code, allowing attackers to call tls.setDefaultCACertificates() and replace process-wide cert...

CVE-2026-92941

vm2 versions from 3.11.3 before 3.11.7 expose the host tls module to NodeVM sandbox code, allowing attackers to call tls

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-09-17 发布INFO

vm2 versions 3.11.3 through 3.11.6 expose the host process's real https.globalAgent to sandboxed code when a NodeVM is explicitly configured to allow require('https'). The built...

CVE-2026-92940

vm2 versions 3.11.3 through 3.11.6 expose the host process's real https.globalAgent to sandboxed code when a NodeVM is e

历史摘要 · 未重新核验 · NVD

#cve #cwe-668

漏洞预警2026-09-17 发布INFO

vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto module to a NodeVM sandbox when the crypto builtin is allowed. The module is presented via a recursive read-only proxy,...

CVE-2026-92939

vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto module to a NodeVM sandbox when the crypto builtin is allowed.

历史摘要 · 未重新核验 · NVD

#cve #cwe-114

漏洞预警2026-09-17 发布INFO

vm2 versions 3.11.3 through 3.11.6 expose Node.js's host node:sqlite module to code running in NodeVM when that builtin is permitted, either explicitly or through builtin: ['*']...

CVE-2026-92938

vm2 versions 3.11.3 through 3.11.6 expose Node.js's host node:sqlite module to code running in NodeVM when that builtin

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-09-17 发布INFO

vm2 3.11.6 is vulnerable to a sandbox escape leading to remote code execution in the host Node.js process. The fix for GHSA-m283-3h24-438v is incomplete: the bridge gate at lib/...

CVE-2026-92937

vm2 3.11.6 is vulnerable to a sandbox escape leading to remote code execution in the host Node.js process. The fix for G

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-17 发布INFO

vm2 is a sandbox for running untrusted Node.js code. In versions >= 3.11.4 and <= 3.11.6, the NodeVM constructor computes `hasRealRequireConfig` with `typeof requireOpts === 'ob...

CVE-2026-92935

vm2 is a sandbox for running untrusted Node.js code. In versions >= 3.11.4 and <= 3.11.6, the NodeVM constructor compute

历史摘要 · 未重新核验 · NVD

#cve #cwe-913

漏洞预警2026-09-17 发布INFO

vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError objects are caught within a singl...

CVE-2026-92934

vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-09-17 发布INFO

Unauthenticated Broken Authentication in Headless Single Sign On <= 1.7.0 versions.

CVE-2026-62108

Unauthenticated Broken Authentication in Headless Single Sign On <= 1.7.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-290

漏洞预警2026-09-17 发布INFO

Unauthenticated Remote Code Execution (RCE) in Migratico Lite <= 2.6.8 versions.

CVE-2026-62104

Unauthenticated Remote Code Execution (RCE) in Migratico Lite <= 2.6.8 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-17 发布INFO

Unauthenticated Broken Authentication in EduAdmin Booking <= 5.4.2 versions.

CVE-2026-62101

Unauthenticated Broken Authentication in EduAdmin Booking <= 5.4.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-288

漏洞预警2026-09-17 发布INFO

A security flaw has been discovered in rcourtman Pulse up to 6.0.4/6.1.0-rc.4. Affected by this issue is the function fmt.Sprintf of the file /api/security/quick-setup of the co...

CVE-2026-92860

A security flaw has been discovered in rcourtman Pulse up to 6.0.4/6.1.0-rc.4. Affected by this issue is the function fm

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-17 发布INFO

The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authentication token securely, deriving it from data the requester controls and creating...

CVE-2026-88795

The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authentication token securely,

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-17 发布INFO

The Login with QR WordPress plugin through 1.0.0 does not verify that the code used to log a user in is one it issued, matching any stored user metadata value instead, which all...

CVE-2026-86710

The Login with QR WordPress plugin through 1.0.0 does not verify that the code used to log a user in is one it issued, m

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-17 发布INFO

The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication fails, allowing unauthenticated attackers to log in as an...

CVE-2026-86709

The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-17 发布INFO

The Private Feed Key WordPress plugin through 0.1 does not verify that the key used to authenticate a feed request is one it issued, matching any stored user metadata value inst...

CVE-2026-86707

The Private Feed Key WordPress plugin through 0.1 does not verify that the key used to authenticate a feed request is on

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-17 发布INFO

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the move_file function. This is ...

CVE-2026-87796

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to,

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-09-16 发布INFO

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the live (WebSocket) transport authorizes ...

CVE-2026-61594

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-862

漏洞预警2026-09-16 发布INFO

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insuf...

CVE-2026-76460

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to byp

历史摘要 · 未重新核验 · NVD

#cve #cwe-648

漏洞预警2026-09-16 发布INFO

A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. This vulnerability is due to insufficient val...

CVE-2026-20284

A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection

历史摘要 · 未重新核验 · NVD

#cve #cwe-943

漏洞预警2026-09-16 发布INFO

A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0. The script accepts an attacker-controlled address URL parameter and passes i...

CVE-2025-56563

A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0. The script accepts

历史摘要 · 未重新核验 · NVD

#cve #cwe-918