2026-10-02 归档

今日共收录 1399 条安全情报，包含 504 个 CVE，518 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-30 发布INFO

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office Hotel Reservation System Book Now search, where date_to and id_room_type paramet...

CVE-2026-103587

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office Hotel Reservation Syste

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-30 发布INFO

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki MediaSearch extension allows Cross-Site Scripti...

CVE-2026-103585

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation

历史摘要 · 未重新核验 · NVD

#cve #cwe-80

漏洞预警2026-09-30 发布INFO

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki CommonsMetadata extension allows Cross-Site Scr...

CVE-2026-103584

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation

历史摘要 · 未重新核验 · NVD

#cve #cwe-80

漏洞预警2026-09-30 发布INFO

AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers with network access to inject malicious JavaScript...

CVE-2026-47096

AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scripting vulnerability that allows unauthenticated att

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-30 发布INFO

iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (gu...

CVE-2026-101283

iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BI

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-09-30 发布INFO

Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity to an arbitrary ap...

CVE-2026-92172

Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent includi

历史摘要 · 未重新核验 · NVD

#cve #cwe-923

漏洞预警2026-09-30 发布INFO

Devika v1.0 is vulnerable to Code Injection via the Runner.run_code function in src/agents/runner/runner.py.

CVE-2026-51872

Devika v1.0 is vulnerable to Code Injection via the Runner.run_code function in src/agents/runner/runner.py.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-30 发布INFO

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/task_exec.py.

CVE-2026-51860

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/task_e

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-30 发布INFO

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execution without an approval boundary.

CVE-2026-51858

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execu

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-30 发布INFO

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter without an approval boundary.

CVE-2026-51857

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through Sub

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-30 发布INFO

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.init. The FileBrowser class initializes with the host r...

CVE-2026-51853

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-30 发布INFO

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64. The save_file_b64 method accepts user-contro...

CVE-2026-51852

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.sa

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-30 发布INFO

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file.

CVE-2026-51568

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-30 发布INFO

pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF containing many embedded files can cause the dictionary-based attachments API in pypdf/_d...

CVE-2026-102999

pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF containing many embedded files c

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-407

漏洞预警2026-09-30 发布INFO

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string tokens in a font /ToUnicode m...

CVE-2026-102995

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-30 发布INFO

A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially use it to carry out a limited set of int...

CVE-2026-102150

A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker c

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-30 发布INFO

An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant to be reachable through this interfac...

CVE-2026-102145

An authenticated administrator could cause the server to issue requests to, and interact with, internal network services

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

漏洞预警2026-09-30 发布INFO

An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload handler that did not p...

CVE-2026-102143

An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesyste

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-434

漏洞预警2026-09-30 发布INFO

A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. An authenticated Sy...

CVE-2026-102142

A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions c

历史摘要 · 未重新核验 · NVD

#cve #cwe-1336

漏洞预警2026-09-30 发布INFO

An authenticated administrator could initiate an administrative import using a file whose contents were not fully verified, because the import validated only the file's header r...

CVE-2026-102140

An authenticated administrator could initiate an administrative import using a file whose contents were not fully verifi

历史摘要 · 未重新核验 · NVD

#cve #cwe-345