2026-09-28 归档

今日共收录 884 条安全情报，包含 147 个 CVE，402 篇安全通告，以及 73 篇研究论文。

漏洞预警2026-09-27 发布MEDIUM

Heym versions 0.0.90 and earlier contain two server-side request forgery (SSRF) egress gaps, both remediated in app/services/ssrf_guard.py in 0.0.91. First, the LLM image-edit i...

CVE-2026-100863

该漏洞影响 Heym 0.0.90 及更早版本，属于服务端请求伪造 (SSRF) 类型的出站访问控制缺陷，官方在 0.0.91 版本的 app/services/ssrf_guard.py 中完成了两处修复。第一处问题位于大模型图像编辑功能

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-27 发布MEDIUM

heym, a workflow automation platform, stores and returns multiple capability secrets in plaintext in versions prior to 0.0.91. Affected secrets include webhook header-auth value...

CVE-2026-100862

heym 是一个工作流自动化平台，在 0.0.91 之前的版本中存在敏感信息明文存储与泄露漏洞。多个能力密钥（capability secrets）被以明文形式存储，并在接口响应、执行历史或日志中返回。具体包括：webhook 的 head

历史摘要 · 未重新核验 · NVD

#cve #cwe-312

漏洞预警2026-09-27 发布MEDIUM

heym before 0.0.105 does not act on the result of the credential authorization lookup in the Redis workflow node (backend/app/services/node_execution/nodes/redis_node.py). When ...

CVE-2026-100860

heym 是开源的低代码/工作流自动化平台，其 Redis 工作流节点位于 backend/app/services/node_execution/nodes/redis_node.py。该节点在建立 Redis 连接前会调用凭据授权查询函

历史摘要 · 未重新核验 · NVD

#cve #cwe-636

漏洞预警2026-09-27 发布MEDIUM

Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that allows collaborators with shared credential access to exfilt...

CVE-2026-100859

CVE-2026-100859 是 Heym 应用（版本低于 0.0.106）中一个凭证外泄（credential exfiltration）漏洞，位于 POST /api/credentials/test 这一接口。该接口的设计目的是让用

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-27 发布MEDIUM

heym before 0.0.109 contains a server-side request forgery vulnerability in the Slack, Discord, and Crawler workflow nodes. These nodes issue HTTP requests to URLs taken from us...

CVE-2026-100858

heym 是一个开源的可视化工作流自动化平台（用于编排 Slack、Discord、网页抓取等任务）。在 0.0.109 之前的版本中，其 Slack、Discord 与 Crawler 三类工作流节点在发起 HTTP 请求时使用了未受保护

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-27 发布HIGH

AzuraCast before 0.23.4 contains a code injection vulnerability in the ConfigWriter::cleanUpString() method that fails to sanitize Liquidsoap string interpolation sequences, all...

CVE-2026-100857

CVE-2026-100857 是 AzuraCast 开源网络电台管理平台中披露的一处代码注入漏洞，影响 0.23.4 之前的所有版本。漏洞根源位于配置写入组件 ConfigWriter 的 cleanUpString() 方法：该方法在

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-27 发布HIGH

AzuraCast before 0.23.6 contains a code injection vulnerability in the remote relay password field due to incomplete migration from the vulnerable cleanUpString method to toRawS...

CVE-2026-100856

AzuraCast 是一款开源的网络电台/流媒体管理与自动化播出平台，其在 0.23.6 之前的版本中存在一处代码注入漏洞。根因是开发团队进行输入处理 API 迁移时留下了不完整的改造：早期版本使用 cleanUpString 方法对用户可

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-27 发布MEDIUM

AzuraCast before 0.23.6 contains a missing permission check vulnerability in the GET /api/station/{station_id}/file/{id}/play endpoint that allows authenticated users to downloa...

CVE-2026-100855

AzuraCast 是一款开源的网络电台（流媒体）管理与自动化播出平台，广泛用于自建电台、社区广播与多租户托管场景。该漏洞影响 0.23.6 之前的所有版本：位于 GET /api/station/{station_id}/file/{id

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-27 发布MEDIUM

AzuraCast before 0.23.6 lacks RequireInternalConnection middleware on the Liquidsoap API endpoint and incorrectly derives the AutoDJ flag from header presence rather than valida...

CVE-2026-100854

AzuraCast 是一款开源的网络广播电台管理与自动化播出平台，其内部通过 Liquidsoap API 端点实现后端与 AutoDJ（自动播出）组件之间的通信，该端点本应只接受来自本机或受信内部网络的调用。在 0.23.6 之前的版本中

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-27 发布MEDIUM

In AzuraCast before 0.23.8, the public On-Demand download endpoint fails to verify playlist-level access controls, allowing unauthenticated users to download media files exclude...

CVE-2026-100853

AzuraCast 是一套开源的网络电台 / 流媒体自托管平台, 提供直播、自动播放列表 (AutoDJ) 与按需点播 (On-Demand) 下载等功能。CVE-2026-100853 指出在其 0.23.8 之前的版本中, 面向公众开放

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-27 发布HIGH

AzuraCast through 0.23.x contains a command injection vulnerability in the Liquidsoap config generation for live recording that fails to quote the streamer username in process.r...

CVE-2026-100852

CVE-2026-100852 是 AzuraCast 0.23.x 及更早版本中的一个命令注入漏洞，CVSS 3.1 评分为 8.8（向量 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H），属于高危级别。Azura

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-27 发布HIGH

AzuraCast before 0.23.8 contains a DQL injection vulnerability in the sortOrder API parameter of AbstractSearchableListAction.php. Attackers can inject arbitrary DQL expressions...

CVE-2026-100847

CVE-2026-100847 是 AzuraCast 在 0.23.8 版本之前存在的一个 DQL 注入（Doctrine Query Language 注入）漏洞，位于 AbstractSearchableListAction.php

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-28 发布INFO

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appear...

CVE-2026-87723

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious bina

历史摘要 · 未重新核验 · NVD

#cve #cwe-426

漏洞预警2026-09-28 发布INFO

A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file modules/system/classes/ResizeImages.ph...

CVE-2026-100909

A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathFor

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-28 发布INFO

A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulation leads to stack-based buffer overfl...

CVE-2026-100908

A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Par

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-121

漏洞预警2026-09-28 发布INFO

A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the component p2pcam Service. This manipulation causes informa...

CVE-2026-100907

A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the c

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-09-28 发布INFO

A vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/Device of the component ONVIF. The manipulation results in ...

CVE-2026-100906

A vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/De

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-09-28 发布INFO

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is an unknown functio...

CVE-2026-100904

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-09-28 发布INFO

A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /restapi/objects/obj-groups of the component REST API. Such manipul...

CVE-2026-100903

A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /restapi/o

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-28 发布INFO

A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component W...

CVE-2026-100902

A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknow

历史摘要 · 未重新核验 · NVD

#cve #cwe-404