安全日报 - 2026-10-03 - Cyber Security Daily Radar

漏洞预警2026-10-03 发布MEDIUM

The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injection via 'fields[][value]' Parameter in all versions up to, ...

CVE-2026-95865

该漏洞影响 WordPress 的 Beaver Builder Page Builder – Drag and Drop Website Builder 插件，受影响范围为 2.11.0.5 及之前的所有版本。问题的根源在于插件对用户可控

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-03 发布MEDIUM

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versi...

CVE-2026-94378

CVE-2026-94378 是 WordPress 插件 SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent（工单系统与在线客服机器人组件）中的一个存

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-03 发布MEDIUM

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 5.5.1...

CVE-2026-92243

WordPress 搜索增强插件 Ivory Search（Ivory Search – WordPress Search Plugin）被披露存在反射型跨站脚本漏洞（Reflected XSS），编号 CVE-2026-92243，影响所

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-03 发布MEDIUM

The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all...

CVE-2026-100180

本条目披露的是 WordPress 生态中一款名为 "Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates" 的第三方插件存在的存储型跨站脚本（

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-03 发布HIGH

Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission boundary. A workspace...

CVE-2026-105090

Formbricks 是一套开源问卷／调查平台，其 5.4.4 之前的 5.x 版本以及 6.0.1 之前的 6.x 版本存在存储型跨站脚本（stored XSS）漏洞，根因是权限校验缺失。产品在调查（survey）级别提供了 Custom

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-03 发布LOW

ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an alternate D...

CVE-2026-105083

ImageMagick 在 7.1.2-32 与 6.9.13-57 之前的版本中存在一个策略绕过漏洞, 问题出在 LoadPolicyCache 这一负责加载 policy.xml 安全策略配置的函数上。ImageMagick 通过 po

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-10-03 发布INFO

OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow.

CVE-2026-79113

OpenAPV 从命名与上下文看是 APV(Advanced Professional Video)专业视频编解码格式的开源实现。根据 NVD 元数据,CVE-2026-79113 的官方描述为 "OpenAPV before 1.1.1.

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-10-03 发布MEDIUM

Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactive monitor data by querying dashboard...

CVE-2026-105030

Kener 是一款开源的状态页面与监控告警系统。CVE-2026-105030 影响 Kener 4.0.0 及之后、4.1.6 之前的版本。该漏洞存在于 dashboard 相关的 API 处理逻辑中：这些处理器在返回监控项数据时没有应用

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-10-03 发布MEDIUM

UVdesk support-center-bundle before 1.1.3.3 contains an insecure direct object reference vulnerability in the rateTicket action of Controller/Ticket.php that allows authenticate...

CVE-2026-105029

UVdesk 是一个基于 Symfony 框架构建的开源工单与客服支持系统, support-center-bundle 是其面向客户的前台支持中心组件。根据 NVD 元数据, 该组件 1.1.3.3 之前的版本在 Controller/T

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

威胁情报2026-10-03 发布INFO

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

历史摘要 · 未重新核验 · CrowdStrike

#apt #edr #crowdstrike

威胁情报2026-10-03 发布INFO

Cloud ManagerManage your cloud computing services

历史摘要 · 未重新核验 · Akamai Security Research

#botnet #ddos #akamai

威胁情报2026-10-03 发布INFO

See all Cloud Computing

历史摘要 · 未重新核验 · Akamai Security Research

#botnet #ddos #akamai

威胁情报2026-10-03 发布INFO

智利银行在勒索软件攻击后关闭所有分行

历史摘要 · 未重新核验 · CNCERT

#government #report #cncert

威胁情报2026-10-03 发布INFO

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

历史摘要 · 未重新核验 · CrowdStrike

#apt #edr #crowdstrike

威胁情报2026-10-03 发布INFO

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

历史摘要 · 未重新核验 · CrowdStrike

#apt #edr #crowdstrike

威胁情报2026-10-03 发布INFO

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

历史摘要 · 未重新核验 · CrowdStrike

#apt #edr #crowdstrike

威胁情报2026-10-03 发布INFO

Threat Hunting & Intel

历史摘要 · 未重新核验 · CrowdStrike

#apt #edr #crowdstrike

威胁情报2026-10-03 发布INFO

Endpoint Security & XDR

历史摘要 · 未重新核验 · CrowdStrike

#apt #edr #crowdstrike

威胁情报2026-10-03 发布INFO

Engineering & Tech

历史摘要 · 未重新核验 · CrowdStrike

#apt #edr #crowdstrike

威胁情报2026-10-03 发布INFO

EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware

历史摘要 · 未重新核验 · CrowdStrike

#apt #edr #crowdstrike

2026-10-03 归档