安全日报 - 2026-10-06 - Cyber Security Daily Radar

漏洞预警2026-10-05 发布INFO

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Ma...

CVE-2026-97283

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager al

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-10-05 发布INFO

Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by Gitea OAuth and by self-managed GitLab OAuth deployments where email co...

CVE-2026-105640

Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by Gitea OAuth an

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-290

漏洞预警2026-10-05 发布INFO

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check,...

CVE-2026-105639

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for an

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-287 #cwe-639

漏洞预警2026-10-05 发布INFO

Plane is an open-source project management tool. Prior to 1.4.0, Plane's magic-code email login uses a six-digit numeric OTP with approximately 20 bits of entropy. The verifier ...

CVE-2026-105638

Plane is an open-source project management tool. Prior to 1.4.0, Plane's magic-code email login uses a six-digit numeric

历史摘要 · 未重新核验 · NVD

#cve #cwe-307

漏洞预警2026-10-05 发布INFO

Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/views/asset/v2.py retrieves assets using id__in=asset_ids an...

CVE-2026-105637

Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/vie

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-05 发布INFO

Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhook_task.py calls requests.post() without allow_redirect...

CVE-2026-105636

Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/web

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-05 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events...

CVE-2026-103352

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Bo

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-05 发布INFO

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter.

CVE-2026-88395

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-05 发布INFO

A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.

CVE-2026-79820

A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-10-05 发布INFO

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Han...

CVE-2026-105285

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-121

漏洞预警2026-10-05 发布INFO

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Che...

CVE-2026-105284

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

安全公告2026-10-06 发布INFO

京ICP证080047号[京ICP备08010314号-6]

历史摘要 · 未重新核验 · 360CERT

#360 #vulnerability #advisory

安全公告2026-10-06 发布INFO

京网文〔2020〕6051-1195号

历史摘要 · 未重新核验 · 360CERT

#360 #vulnerability #advisory

安全公告2026-10-06 发布INFO

（总）网出证（京）字第281号

历史摘要 · 未重新核验 · 360CERT

#360 #vulnerability #advisory

安全公告2026-10-06 发布INFO

京公网安备 11000002002063号

历史摘要 · 未重新核验 · 360CERT

#360 #vulnerability #advisory

安全公告2026-10-06 发布INFO

浙公网安备 33010602009975号

历史摘要 · 未重新核验 · 阿里云安全公告

#aliyun #cloud #advisory

安全公告2026-10-06 发布INFO

Background Security Improvements

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-10-06 发布INFO

Get help with security issues

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-10-06 发布INFO

submit your research

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-10-06 发布INFO

update the software on your iPhone or iPad

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

2026-10-06 归档