安全日报 - 2026-09-28 - Cyber Security Daily Radar

漏洞预警2026-09-27 发布INFO

Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboard_host setting is empty, /api/v1/oauth2/{provider} (cmd/da...

CVE-2026-101090

Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboard

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-09-27 发布INFO

obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they poss...

CVE-2026-101084

obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticat

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-27 发布INFO

Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container lis...

CVE-2026-101065

Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-27 发布INFO

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker ...

CVE-2026-100741

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3

历史摘要 · 未重新核验 · NVD

#cve #cwe-95

安全公告2026-09-28 发布INFO

Background Security Improvements

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-09-28 发布INFO

Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。

Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。

历史摘要 · 未重新核验 · 知道创宇 / Seebug

#knownsec #seebug #vulnerability

安全公告2026-09-28 发布INFO

Cookie settings

历史摘要 · 未重新核验 · Mozilla Security Advisories

#mozilla #firefox #browser

安全公告2026-09-28 发布INFO

Mozilla Monitor

历史摘要 · 未重新核验 · Mozilla Security Advisories

#mozilla #firefox #browser

安全公告2026-09-28 发布INFO

The Mozilla Manifesto

历史摘要 · 未重新核验 · Mozilla Security Advisories

#mozilla #firefox #browser

安全公告2026-09-28 发布INFO

Mozilla Foundation

历史摘要 · 未重新核验 · Mozilla Security Advisories

#mozilla #firefox #browser

安全公告2026-09-28 发布INFO

Accessibility Policy

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

#oracle #database #java

安全公告2026-09-28 发布INFO

Create an Account

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

#oracle #database #java

安全公告2026-09-28 发布INFO

Instructions for subscribing to email notifications

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

#oracle #database #java

安全公告2026-09-28 发布INFO