Cyber Security Daily Radar

#cwe-693

共收录 445 条相关情报。

← 返回所有主题
漏洞预警2026-07-14 发布INFO

Twig is a template language for PHP. Prior to 3.27.0, deprecated internal wrappers in src/Resources/core.php do not forward the current sandbox state to CoreExtension::checkArro...

CVE-2026-48805

Twig is a template language for PHP. Prior to 3.27.0, deprecated internal wrappers in src/Resources/core.php do not forw

历史摘要 · 未重新核验 · NVD

#cve#cwe-693
漏洞预警2026-07-14 发布INFO

Twig is a template language for PHP. From 3.24.0 until 3.26.0, object-destructuring assignment compiles CoreExtension::getAttribute() with the sandbox argument hardcoded to fals...

CVE-2026-46639

Twig is a template language for PHP. From 3.24.0 until 3.26.0, object-destructuring assignment compiles CoreExtension::g

历史摘要 · 未重新核验 · NVD

#cve#cwe-693
漏洞预警2026-07-14 发布INFO

Twig is a template language for PHP. Prior to 3.26.0, {% sandbox %}{% include %} can include a template that was previously loaded outside the sandbox without re-invoking checkS...

CVE-2026-46638

Twig is a template language for PHP. Prior to 3.26.0, {% sandbox %}{% include %} can include a template that was previou

历史摘要 · 未重新核验 · NVD

#cve#cwe-693
漏洞预警2026-07-14 发布INFO

Twig is a template language for PHP. From 3.9.0 until 3.26.0, template_from_string() compiles an inner template under a synthesized __string_template__<hash> name that can fall ...

CVE-2026-46634

Twig is a template language for PHP. From 3.9.0 until 3.26.0, template_from_string() compiles an inner template under a

历史摘要 · 未重新核验 · NVD

#cve#cwe-693
安全公告2026-07-14 发布INFO

Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters

CVE-2026-48807

Twig is a template language for PHP. Prior to 3.27.0, the sandbox __toString() checks do not fully cover Traversable val

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-693#cwe-863
安全公告2026-07-14 发布INFO

Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys

CVE-2026-48806

Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression does not guard dynamic mapping keys that are coerc

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-693#cwe-863
安全公告2026-07-14 发布INFO

Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`

CVE-2026-48808

Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-693#cwe-863
安全公告2026-07-14 发布INFO

Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`

CVE-2026-48805

Twig is a template language for PHP. Prior to 3.27.0, deprecated internal wrappers in src/Resources/core.php do not forw

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-693
安全公告2026-07-14 发布INFO

Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`

CVE-2026-49981

Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is c

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-693#cwe-863
安全公告2026-07-14 发布INFO

Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)

CVE-2026-46638

Twig is a template language for PHP. Prior to 3.26.0, {% sandbox %}{% include %} can include a template that was previou

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-693
安全公告2026-07-14 发布INFO

Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template name

CVE-2026-46634

Twig is a template language for PHP. From 3.9.0 until 3.26.0, template_from_string() compiles an inner template under a

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-693
漏洞预警2026-07-14 发布INFO

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(root, { IN_PLACE: true }) could preserve event-handler attri...

CVE-2026-49459

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(roo

历史摘要 · 未重新核验 · NVD

#cve#cwe-79#cwe-693#cwe-1321
漏洞预警2026-07-14 发布INFO

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(node, { IN_PLACE: true }) accepted same-origin foreign-realm...

CVE-2026-49458

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(nod

历史摘要 · 未重新核验 · NVD

#cve#cwe-79#cwe-501#cwe-693
安全公告2026-07-14 发布INFO

Twig: Sandbox property and method bypass via object-destructuring assignment

CVE-2026-46639

Twig is a template language for PHP. From 3.24.0 until 3.26.0, object-destructuring assignment compiles CoreExtension::g

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-693
漏洞预警2026-07-14 发布HIGH

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

CVE-2026-50646

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

来源摘录 · NVD

#cve#cwe-502#cwe-693
安全公告2026-07-14 发布INFO

DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM

CVE-2026-49459

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(roo

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-1321#cwe-693#cwe-79
安全公告2026-07-14 发布INFO

DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks

CVE-2026-49458

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(nod

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-501#cwe-693#cwe-79
漏洞预警2026-07-14 发布INFO

Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.

CVE-2026-47305

Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

#cve#cwe-693
安全公告2026-07-14 发布INFO

A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the...

CVE-2026-15618

A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecComma

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-693#severity:low
漏洞预警2026-07-14 发布INFO

A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecCommand of the file tools/tool_exec.go of the component exec S...

CVE-2026-15618

A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecComma

历史摘要 · 未重新核验 · NVD

#cve#cwe-693