Klever-Go: /log controls global node logging
CVE-2026-86064
An unauthenticated client can connect to `GET /log`, send an arbitrary logger profile as the first WebSocket message, an
2026-09-24 归档
今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint
CVE-2026-93421
### Summary The `/__csp__` endpoint accepts unauthenticated JSON reports and logs user-controlled values directly to st
OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting
CVE-2026-77601
## Summary An authenticated user can execute arbitrary operating system commands on the `openc3-cosmos-cmd-tlm-api` serv
Formie: Unauthenticated users can overwrite incomplete submissions via submit action
CVE-2026-76087
### Impact The anonymous front-end action `formie/submissions/submit` (`SubmissionsController::actionSubmit`) trusted a
Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials
CVE-2026-76086
### Impact The control panel action `formie/integrations/form-settings` (`IntegrationsController::actionFormSettings`)
Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)
CVE-2026-92692
### Impact An unauthenticated JCR-SQL2 injection exists in the Smart Content category filter of the 2.x content query b
JLine: ReDoS in Nano Editor Regex Search Mode
CVE-2026-77421
### Summary When regex search mode is enabled in the JLine3 `nano` editor, the user-supplied search term is compiled di
JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrapping
CVE-2026-77422
### Summary The JLine3 built-in `grep` command wraps the user-supplied regular expression with `.*` before compiling it
JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable
CVE-2026-77420
### Summary The JLine3 `HISTORY_IGNORE` variable is converted into a Java regular expression with only partial escaping
Solspace Freeform: Limited Twig template injection via submitted field values
CVE-2026-73858
### Summary A limited server-side Twig template injection issue was identified in Solspace Freeform for Craft CMS. In a
Formally Modeling the Terrapin Attack on SSH
该论文针对 SSH 通道完整性，提出一个在“部分选定状态”（partially chosen state）下形式化建模的框架，以回答 Terrapin 攻击（USENIX Security 2024）留下的开放问题：在 Terrapin 攻
京公网安备 11000002002063号
本条输入标题为“京公网安备 11000002002063号”，来源标注为 360CERT 安全报告，链接指向 beian.gov.cn 的备案信息查询页面，发布时间为 2026-09-24。正文、摘要为空；CVEs、可能威胁行为者、恶意软件
（总）网出证（京）字第281号
本次输入经核验后并非威胁情报报告，也不包含任何攻击活动描述。标题“（总）网出证（京）字第281号”是 360 官方网站公示的互联网信息服务/网络出版类资质证照编号，source_url 指向 360.cn 的证照公示页面（licence2.
京网文〔2020〕6051-1195号
该条目标题为“京网文〔2020〕6051-1195号”，来源标注为“360CERT 安全报告”，但 source_url 实际指向 360 公司网站的许可/备案页面（https://www.360.cn/licence1.html），并非安
Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may...
CVE-2026-97155
Fabasoft Folio Client 是一款本地安装的组件，通过 Web Messaging 与 Fabasoft 浏览器扩展进行通信。在 2026 之前的版本中，该客户端默认不限制哪些 Web 源可以调用其功能。用于限制允许源的注册
mammoth (aka mammoth.js) before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document. Converting a crafted .docx file allows an attacker to ...
CVE-2026-97151
mammoth(又称 mammoth.js)是一个广泛使用的 JavaScript 库,用于把 .docx 等 Word 文档转换为 HTML 或 Markdown,常见于文档预览、内容导入、富文本转换等后端或前端场景。NVD 披露,1.1
A vulnerability was detected in yhx070424 ShopXO up to 2.2.7. Affected by this vulnerability is an unknown functionality of the file config/ueditor.php of the component Ueditor ...
CVE-2026-96898
ShopXO 是一套基于 PHP/ThinkPHP 开发的开源电商系统，主仓库位于 yhx070424 名下。本次披露的问题影响 2.2.7 及更早版本，缺陷位置在 Ueditor 上传接口的配置代码 config/ueditor.php
In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method, expiry, and path, an...
CVE-2026-97149
该漏洞影响 OpenStack Swift 2.38.2 之前版本。问题出在 tempurl 中间件: 它在处理已签名的 PUT 请求时, 没有拒绝或剥离 X-Copy-From 请求头, 而 TempURL 签名本身只覆盖 HTTP 方法
A security flaw has been discovered in MantisZip up to 0.4.5. Affected by this issue is the function Path.Combine of the file MainWindow.UI.cs of the component Preview. The mani...
CVE-2026-96884
CVE-2026-96884 是披露在 MantisZip 0.4.5 及更早版本中的一处路径遍历（Path Traversal）漏洞。根据 NVD 元数据描述，问题出在预览（Preview）组件对应的 MainWindow.UI.cs 文
A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/...
CVE-2026-96882
该条目来自 NVD，披露编号 CVE-2026-96882，影响 TaleLin 开源的 lin-cms-spring-boot 项目 0.2.1 及更早版本。漏洞位于 src/main/java/io/github/talelin/lat