2026-09-29 归档

今日共收录 1279 条安全情报，包含 376 个 CVE，505 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-29 发布HIGH

shell-quote's `quote()` function emits a `{ comment }` token as `#` followed by its text, which comments out the rest of the shell line, including the opening quote of any later...

CVE-2026-102422

shell-quote 是广泛使用的 Node.js 库，用于解析和引用 shell 命令字符串。其 quote() 函数在遇到 { comment: '...' } 类型 token 时会输出 # 加注释内容，导致该行后续内容被 shel

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-29 发布LOW

pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback (lib/sync.js). A password longer than the block size (...

CVE-2026-102414

CVE-2026-102414 涉及广泛使用的 npm 加密库 pbkdf2(3.1.6 及更早版本)。该库在无法使用运行时原生 pbkdf2Sync 时,会退回纯 JavaScript 实现 lib/sync.js。问题出在这一回退路径的

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-29 发布HIGH

A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/...

CVE-2026-102249

CVE-2026-102249 是一处披露于 REBUILD 项目（版本至 4.4.11）中的缺失授权（Missing Authorization，CWE-862）漏洞，由 NVD 收录。问题出在文件编辑保存接口 /commons/file

历史摘要 · 未重新核验 · NVD

#cve #cwe-862 #cwe-863

漏洞预警2026-09-29 发布HIGH

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up ...

CVE-2026-96326

CVE-2026-96326 是 WordPress 插件 HT Contact Form – Drag & Drop Form Builder 中的一个存储型跨站脚本（Stored XSS）漏洞。根据 NVD 元数据，该插件在包括 2.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-29 发布HIGH

Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the User_ReadBySsoUserOrganizationIdExternalId stored procedure as NVARCHAR(50) while the column ...

CVE-2026-101878

该漏洞影响 Bitwarden Server 2025.6.0 至 2026.5.0 之前的版本，根因是数据库层面的类型长度不一致。用于按 SSO 身份标识查找组织成员的存储过程 User_ReadBySsoUserOrganization

历史摘要 · 未重新核验 · NVD

#cve #cwe-303

漏洞预警2026-09-29 发布INFO

A flaw has been found in RaspAP raspap-webgui up to 3.5.5. Affected is the function WiFiManager::writeWpaSupplicant of the file src/RaspAP/Networking/Hotspot/WiFiManager.php of ...

CVE-2026-101858

A flaw has been found in RaspAP raspap-webgui up to 3.5.5. Affected is the function WiFiManager::writeWpaSupplicant of t

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-09-29 发布INFO

GestSup versions before 3.2.62 contain a stored cross-site scripting vulnerability in the IMAP OAuth connector that double-decodes MIME-encoded email subjects after HTML escapin...

CVE-2026-102374

GestSup versions before 3.2.62 contain a stored cross-site scripting vulnerability in the IMAP OAuth connector that doub

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-29 发布INFO

GestSup versions before 3.2.62 fail to validate ticket ownership when loading comments via the threadedit parameter in thread.php. Authenticated attackers can enumerate sequenti...

CVE-2026-102373

GestSup versions before 3.2.62 fail to validate ticket ownership when loading comments via the threadedit parameter in t

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-29 发布INFO

GestSup versions before 3.2.62 fail to properly sanitize HTML email bodies in the IMAP LOGIN connector, allowing unauthenticated attackers to store arbitrary JavaScript in ticke...

CVE-2026-102372

GestSup versions before 3.2.62 fail to properly sanitize HTML email bodies in the IMAP LOGIN connector, allowing unauthe

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-29 发布INFO

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_sp2_find_mailfrom_domain of the file libopendmarc...

CVE-2026-101281

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function op

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-29 发布INFO

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarc_policy_query_dmarc of the component Multi-Record Set Handler. Th...

CVE-2026-101280

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarc_policy_

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-290

漏洞预警2026-09-29 发布INFO

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarc_policy.c of the c...

CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown func

历史摘要 · 未重新核验 · NVD

#cve #cwe-189 #cwe-190

漏洞预警2026-09-29 发布INFO

A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_get_tld of the file libopendmarc/opendmarc_tld.c : of the com...

CVE-2026-101278

A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_get_

历史摘要 · 未重新核验 · NVD

#cve #cwe-345 #cwe-346

漏洞预警2026-09-29 发布INFO

The MCUmgr SMP-over-console transport decodes a base64 frame, reads a 16-bit packet length from it, verifies a CRC and then unconditionally strips the trailing CRC with rx_ctxt-...

CVE-2026-18747

The MCUmgr SMP-over-console transport decodes a base64 frame, reads a 16-bit packet length from it, verifies a CRC and t

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-191

漏洞预警2026-09-29 发布INFO

parse_write_op() in subsys/net/lib/lwm2m/lwm2m_message_handling.c handles inbound CoAP WRITE/CREATE requests that carry a Block1 option. For the first block of a transfer it cal...

CVE-2026-18746

parse_write_op() in subsys/net/lib/lwm2m/lwm2m_message_handling.c handles inbound CoAP WRITE/CREATE requests that carry

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-09-29 发布INFO

The native BSD-socket layer recorded a pending asynchronous socket error by type-punning it into struct net_context's void user_data field (ctx->user_data = INT_TO_POINTER(-stat...

CVE-2026-18417

The native BSD-socket layer recorded a pending asynchronous socket error by type-punning it into struct net_context's vo

历史摘要 · 未重新核验 · NVD

#cve #cwe-843

漏洞预警2026-09-29 发布INFO

mall4j through 4.0 contains an insufficient session expiration vulnerability in the token refresh endpoint that fails to validate the enabled flag when issuing new sessions. Dis...

CVE-2026-102367

mall4j through 4.0 contains an insufficient session expiration vulnerability in the token refresh endpoint that fails to

历史摘要 · 未重新核验 · NVD

#cve #cwe-613

漏洞预警2026-09-29 发布INFO

mall4j through 4.0 contains an unrestricted file upload vulnerability in FileController endpoints that lack authorization checks and accept arbitrary file types without validati...

CVE-2026-102366

mall4j through 4.0 contains an unrestricted file upload vulnerability in FileController endpoints that lack authorizatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-09-29 发布INFO

mall4j through 4.0 fails to enforce authorization checks on GET endpoints in UserAddrController that retrieve customer address data. Authenticated attackers can call /user/addr/...

CVE-2026-102365

mall4j through 4.0 fails to enforce authorization checks on GET endpoints in UserAddrController that retrieve customer a

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-29 发布INFO

mall4j through 4.0 fails to validate the sysType field in sa-token sessions, allowing storefront customers to authenticate as back-office users by reusing their session tokens. ...

CVE-2026-102364

mall4j through 4.0 fails to validate the sysType field in sa-token sessions, allowing storefront customers to authentica

历史摘要 · 未重新核验 · NVD

#cve #cwe-287