2026-09-29 归档

今日共收录 1279 条安全情报,包含 376 个 CVE,505 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-29 发布INFO

A vulnerability has been found in RaspAP raspap-webgui up to 3.5.5. Affected by this vulnerability is the function escapeshellcmd of the file ajax/openvpn/del_ovpncfg.php of the...

CVE-2026-101859

A vulnerability has been found in RaspAP raspap-webgui up to 3.5.5. Affected by this vulnerability is the function escap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Nest is a framework for building scalable Node.js server-side applications. Prior to 11.2.4 and 12.0.2, a single message with a deeply nested object in its pattern can terminate...

CVE-2026-102281

Nest is a framework for building scalable Node.js server-side applications. Prior to 11.2.4 and 12.0.2, a single message

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd.passwd_set of the file /ubus. Such manipulation leads to...

CVE-2026-101188

A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-o...

CVE-2026-55157

Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge gra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, the das...

CVE-2026-55156

Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge gra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when ...

CVE-2026-97399

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte bey

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the componen...

CVE-2026-101071

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown cod

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

An OS command injection flaw was found in the set_hostname_internal function of NooBaa's cluster_internal_api. This component is responsible for managing the Multi-Cloud Object ...

CVE-2026-86330

An OS command injection flaw was found in the set_hostname_internal function of NooBaa's cluster_internal_api. This comp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on th...

CVE-2026-82932

mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, includin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session id...

CVE-2026-52749

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerabil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a...

CVE-2026-52748

The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. Th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-27 发布INFO

Obot before v0.23.0 (affected versions <= v0.22.1) running with OBOT_SERVER_ENABLE_AUTHENTICATION=true exposes OAuth dynamic client registration without authentication and witho...

CVE-2026-101062

Obot before v0.23.0 (affected versions <= v0.22.1) running with OBOT_SERVER_ENABLE_AUTHENTICATION=true exposes OAuth dyn

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

Compatibility Test Suite (CTS)

本条目来自 Android Security Bulletin(Android 安全公告)官方站点,标题为“Compatibility Test Suite (CTS)”,链接指向 source.android.com 的兼容性测试套件文档

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-09-29 发布INFO

Compatibility Definition Document (CDD)

Android 安全公告中出现了标题为“Compatibility Definition Document (CDD)”的条目,来源为 Android Security Bulletin,发布时间为 2026 年 9 月 29 日。CDD

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-09-29 发布INFO

Tools, build, and related reference

本条内容来自 Android 官方安全公告站点(Android Security Bulletin)下的一个参考文档页面,标题为“Tools, build, and related reference”。从标题与来源路径(source.an

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-09-29 发布INFO

Latest Compatibility Definition Document (CDD)

Android 兼容性定义文档(Compatibility Definition Document,CDD)是 Android 官方发布的技术规范性文件,用于明确一部设备必须满足哪些软硬件与行为要求,才能被视为与某一 Android 版本「

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-09-29 发布INFO

Latest security bulletins

该条目指向 Android 安全公告(Android Security Bulletin)官方站点中的“最新安全公告(Latest security bulletins)”汇总页面, 由 Google Android 安全团队维护, 是按月

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-09-29 发布INFO

update the software on your Mac

该条目来自 Apple 官方安全发布/支持文档,标题为「更新你 Mac 上的软件」,本质上是一篇面向普通用户与 IT 管理员的通用更新指引,而非针对某个具体漏洞的技术公告。此类页面通常说明:macOS 及其随系统分发的内置组件(如 Safa

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-09-29 发布INFO

update the software on your iPhone or iPad

该条目来自 Apple 官方安全发布渠道(Apple Security Releases),标题为“update the software on your iPhone or iPad”,发布时间为 2026-09-29。从标题与来源判断,

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-09-29 发布INFO

submit your research

本条数据来自 Apple 官方安全发布渠道(Apple Security Releases),指向 support.apple.com/en-us/102549,发布时间为 2026-09-29,标题为 “submit your resea

历史摘要 · 未重新核验 · Apple Security Releases