2026-10-06 归档

今日共收录 1258 条安全情报，包含 460 个 CVE，421 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-05 发布INFO

Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creat...

CVE-2026-102780

Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862 #cwe-915

漏洞预警2026-10-05 发布INFO

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The page a shared image link opens (the sha...

CVE-2026-102778

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extens

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-601

漏洞预警2026-10-05 发布INFO

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0 - Eight tasks which the buttons of the back-end lis...

CVE-2026-102776

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension <

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-10-05 发布INFO

Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8 - Phoca Cart's order-file download endpoint does ...

CVE-2026-102775

Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-05 发布INFO

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and not properly validated, lead...

CVE-2026-102428

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for r

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-05 发布INFO

Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken fr...

CVE-2026-102426

Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-05 发布INFO

A caller who can invoke the convert_playwright_script prompt in mcp-k6 can pass a bare file path as the playwright_script argument and receive the contents of any file readable ...

CVE-2026-89039

A caller who can invoke the convert_playwright_script prompt in mcp-k6 can pass a bare file path as the playwright_scrip

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-424

漏洞预警2026-10-05 发布INFO

WookTeam v1.6.6 and before is vulnerable to a Directory Traversal. The project task export endpoint /api/project/task/export downloads an arbitrary file from the server when the...

CVE-2026-88394

WookTeam v1.6.6 and before is vulnerable to a Directory Traversal. The project task export endpoint /api/project/task/ex

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-05 发布INFO

Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local(). This allows an attacker to execute arbitrary code.

CVE-2026-88392

Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local(). This allows an attacker to execute arbi

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-05 发布INFO

Northstar (dromara/northstar, quantitative trading platform) <= 9.1.1 enables the H2 Console but its auth interceptor only covers /northstar/**, so /h2-console is exposed with n...

CVE-2026-88391

Northstar (dromara/northstar, quantitative trading platform) <= 9.1.1 enables the H2 Console but its auth interceptor on

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-05 发布INFO

Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security ...

CVE-2026-105421

Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows E

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-05 发布INFO

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-...

CVE-2026-92931

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 thro

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-05 发布INFO

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to the external helper tools launched by the application is i...

CVE-2026-77805

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to t

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-10-05 发布INFO

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, a time-of-check time-of-use (TOCTOU) race condition exists in the installation of the HTT...

CVE-2026-77804

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, a time-of-check time-of-use (TOC

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

漏洞预警2026-10-05 发布INFO

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, front-end request desynchronization is possible in the proxy request forwarding component...

CVE-2026-77803

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, front-end request desynchronizat

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-10-05 发布INFO

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, HTTP request smuggling is possible in the proxy request forwarding component. Requests co...

CVE-2026-77802

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, HTTP request smuggling is possib

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-10-05 发布INFO

A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/backends/elasticsearch_backend.py of the component more_l...

CVE-2026-105315

A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-95

漏洞预警2026-10-05 发布INFO

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be load...

CVE-2026-63277

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document cou

历史摘要 · 未重新核验 · NVD

#cve #cwe-829

漏洞预警2026-10-05 发布INFO

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a docum...

CVE-2026-63270

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information c

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-10-05 发布INFO

LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read t...

CVE-2026-63269

LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-918