2026-10-28 归档

今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-27 发布INFO

Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_server.py that allows MCP clients to run commands via unsa...

CVE-2026-117569

Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_s

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布INFO

mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the res...

CVE-2026-117568

mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by s

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布INFO

esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool param...

CVE-2026-117567

esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary com

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布INFO

EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload...

CVE-2026-117566

EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-27 发布INFO

Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by submitting ano...

CVE-2026-117565

Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-27 发布INFO

MrDoc through 1.1.1 contains a broken access control vulnerability in the manage_doc_share type 3 branch that allows authenticated users to modify other users' document share se...

CVE-2026-117563

MrDoc through 1.1.1 contains a broken access control vulnerability in the manage_doc_share type 3 branch that allows aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-27 发布INFO

rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read stories from unpublished feeds through the anonymous publ...

CVE-2026-117562

rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-27 发布INFO

Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag value...

CVE-2026-117561

Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell com

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布INFO

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attackers to execute shell commands through unsanitized MCP tool ...

CVE-2026-117560

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布INFO

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $(...) or backtick substitution. Attack...

CVE-2026-117559

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command a

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布INFO

The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in the re...

CVE-2026-117558

The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to exe

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布INFO

SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM m...

CVE-2026-117557

SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-27 发布INFO

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to comp...

CVE-2026-117556

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes t

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-27 发布INFO

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an integer overflow in the row byte count. Attackers can supp...

CVE-2026-117555

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an i

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-10-27 发布INFO

Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additional_guests field when...

CVE-2026-117554

Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register ev

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-10-27 发布INFO

Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by...

CVE-2026-117553

Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attacke

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-10-27 发布INFO

A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the file internal/taskexec/distributed_manager.go of the componen...

CVE-2026-117504

A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the file

历史摘要 · 未重新核验 · NVD

#cve #cwe-404

漏洞预警2026-10-27 发布INFO

A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/rest.go of the component REST SSE handler. This manipulation ...

CVE-2026-117503

A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/rest

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-404

漏洞预警2026-10-27 发布INFO

A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functional...

CVE-2026-10537

A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthen

历史摘要 · 未重新核验 · NVD

#cve #cwe-305

漏洞预警2026-10-27 发布INFO

An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information

CVE-2026-107067

An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information

历史摘要 · 未重新核验 · NVD

#cve