2026-09-30 归档

今日共收录 1598 条安全情报，包含 728 个 CVE，467 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-29 发布INFO

The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this...

CVE-2026-94204

The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowin

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-09-29 发布INFO

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot ...

CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Bar

历史摘要 · 未重新核验 · NVD

#cve #cwe-283

漏洞预警2026-09-29 发布INFO

An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or t...

CVE-2026-81842

An authenticated user with edit permission on one folder can move a library panel into another folder where they only ha

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-29 发布INFO

Pausing a shared (public) dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard co...

CVE-2026-81841

Pausing a shared (public) dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-29 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.11, PyEnvCfg.write() writes prompt values verbatim to the line-oriented pyvenv.cfg format w...

CVE-2026-102938

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.11, PyEnvCfg.write() writes prompt

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

漏洞预警2026-09-29 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote() returns prompt text unchanged before activate.bat inserts it int...

CVE-2026-102937

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote() returns

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-29 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, download_wheel() accepts pip and setuptools seed wheels fetched for periodic updates or...

CVE-2026-102930

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, download_wheel() accepts pip a

历史摘要 · 未重新核验 · NVD

#cve #cwe-494

漏洞预警2026-09-29 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate (bash and zsh) and activate.fish scripts place values already es...

CVE-2026-102925

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate (bash a

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-29 发布INFO

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the...

CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit

历史摘要 · 未重新核验 · NVD

#cve #cwe-88 #cwe-209 #cwe-918

漏洞预警2026-09-29 发布INFO

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulati...

CVE-2026-102620

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::c

历史摘要 · 未重新核验 · NVD

#cve #cwe-189 #cwe-190

漏洞预警2026-09-29 发布INFO

iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrec...

CVE-2026-102253

iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-09-29 发布INFO

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the...

CVE-2026-96274

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connectio

历史摘要 · 未重新核验 · NVD

#cve #cwe-248

漏洞预警2026-09-29 发布INFO

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the route /boaf...

CVE-2026-94953

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-29 发布INFO

metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference (IDOR) in the MCP transport session dispatch. The session store (getSession in session-lifetime-m...

CVE-2026-79537

metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference (IDOR) in the MCP transport session disp

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-29 发布INFO

bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. This vulnerability allows attackers to access sensitive data...

CVE-2026-79536

bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. Thi

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-29 发布INFO

mbailey VoiceMode <= 8.10.1 is vulnerable to OS Command Injection. The update_config MCP tool (and the "voicemode config set" CLI) writes a caller-supplied value into ~/.voicemo...

CVE-2026-79535

mbailey VoiceMode <= 8.10.1 is vulnerable to OS Command Injection. The update_config MCP tool (and the "voicemode config

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-29 发布INFO

mark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper link resolution in validatePath (filesystemserver/handler/helper.go). When filepa...

CVE-2026-79534

mark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper link resolution in valid

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-29 发布INFO

Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass device handle access restrictions via...

CVE-2026-79417

Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privile

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-29 发布INFO

An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint

CVE-2026-79403

An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everythin

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-29 发布INFO

KitchenAsty through 0.3.0 contains a broken object level authorization (IDOR) vulnerability in the reservations API. The endpoint GET /api/reservations/:id in packages/server ap...

CVE-2026-79348

KitchenAsty through 0.3.0 contains a broken object level authorization (IDOR) vulnerability in the reservations API. The

历史摘要 · 未重新核验 · NVD

#cve