2026-10-16 归档

今日共收录 833 条安全情报,包含 0 个 CVE,434 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-10-16 发布INFO

BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that...

CVE-2026-111363

BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-pri

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router...

CVE-2026-111331

Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authentica

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

CVE-2026-100351

## Summary `openapi3filter.ValidationHandler.Middleware` validates requests with kin-openapi's legacy router, which sel

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression

CVE-2026-100350

### Summary `openapi3filter` decodes `deepObject`-style query parameters by looping over **every** key in the request's

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path

CVE-2026-100347

## Summary The `openapi3filter.ValidationHandler` (the exported, documented request-validation middleware) hard-wires th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

Gotify: Insufficiently Protected Password Change endpoint

CVE-2026-102603

The password change endpoint (`POST /current/user/password`) in Gotify versions <= 2.9.1 does not require knowledge of t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Firefox browsers

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-10-16 发布INFO

Sign in to Cloud

Sign in to Cloud

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-10-16 发布INFO

Sign Up for Free Cloud Tier

Sign Up for Free Cloud Tier

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-10-16 发布INFO

iOS 26.4.2 and iPadOS 26.4.2

iOS 26.4.2 and iPadOS 26.4.2

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-10-16 发布INFO

iOS 18.7.8 and iPadOS 18.7.8

iOS 18.7.8 and iPadOS 18.7.8

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-10-16 发布INFO

iOS 18.7.7 and iPadOS 18.7.7

iOS 18.7.7 and iPadOS 18.7.7

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-10-16 发布INFO

iOS 26.4 and iPadOS 26.4

iOS 26.4 and iPadOS 26.4

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-10-16 发布INFO

Background Security Improvements for iOS, iPadOS, and macOS

Background Security Improvements for iOS, iPadOS, and macOS

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-10-16 发布INFO

iOS 16.7.15 and iPadOS 16.7.15

iOS 16.7.15 and iPadOS 16.7.15

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-10-16 发布INFO

iOS 15.8.7 and iPadOS 15.8.7

iOS 15.8.7 and iPadOS 15.8.7

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-10-16 发布INFO

iOS 26.3 and iPadOS 26.3

iOS 26.3 and iPadOS 26.3

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-10-16 发布INFO

iOS 18.7.5 and iPadOS 18.7.5

iOS 18.7.5 and iPadOS 18.7.5

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-10-16 发布INFO

Android Code Search

Android Code Search

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-10-16 发布INFO

Secure an Android device

Secure an Android device

历史摘要 · 未重新核验 · Android Security Bulletin