yun2025 发表于 昨天 08:03

苹果、英伟达等科技公司面临潜在国会调查,曾在特朗普白宫宴会捐款 2500 万美元

苹果、英伟达等科技公司面临潜在国会调查,曾在特朗普白宫宴会捐款 2500 万美元

GeoNode:地理数据平台上传图层时存在命令注入风险

11月7日公开的漏洞记录CVE-2026-33050涉及GeoNode。GeoNode用于管理与发布地理空间数据。已登录的低权限用户上传矢量文件时,图层名称可能进入服务器的命令处理流程,原本作为地理数据标识的文字由此有机会触发操作系统命令。公告指出,修复这一问题的版本为5.1.0。版本清单标出的受影响范围包括低于5.1.0。

这条记录给出的CVSS 3.1基础评分为8.8分,分级为高危。按照评分列出的条件,利用者可通过网络接触相关功能,需要已有低权限账户或相当的访问权,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/0ae99730875b7d41836d376db606da5a
https://lightroom.adobe.com/shares/96001a96d5819d48bc35e266f7bfa112
https://lightroom.adobe.com/shares/4d830127181789478b65714e52b0a199
https://lightroom.adobe.com/shares/8d03eae8cdaa694cbde873a839bb2514
https://lightroom.adobe.com/shares/4e9cb69f300fd341beddd63130404159
https://lightroom.adobe.com/shares/972e03ba3ec0a649842818bcd5a4f2cf
https://lightroom.adobe.com/shares/e208920a147d8a43b85b7915ede94884
https://lightroom.adobe.com/shares/74f782ef2d37944d9f56439ba2d051b9
https://lightroom.adobe.com/shares/8334ed80347b0e4c9657d0985801cb60
https://lightroom.adobe.com/shares/df8c83b789a9474aac4f001b7a80b143
https://lightroom.adobe.com/shares/02d6f00e0597f84a91d5f975f7bf87a8
https://lightroom.adobe.com/shares/511f13f3da2b3346aacad950c7deca70
https://lightroom.adobe.com/shares/aa57f7ab2a744743b3e62ef72dfe42d6
https://lightroom.adobe.com/shares/7afdbabea2d5fa4dbbd0852910dcb5d8
https://lightroom.adobe.com/shares/2b08800ef5162f4aa3632c9c0910da99
https://lightroom.adobe.com/shares/f44155cf4400f64cb4bd0feddb04caa7
https://lightroom.adobe.com/shares/d6012be3ded02d45a9402300403e2ad1
https://lightroom.adobe.com/shares/ac2fd758d3f4d344bb452976942925c5
https://lightroom.adobe.com/shares/d6c1aab2c371114db36be93334eb0582
https://lightroom.adobe.com/shares/4519abb5f1960b4493356b553c29d972
https://lightroom.adobe.com/shares/6c395b8a8874724db29bffe4ab80ea1a
https://lightroom.adobe.com/shares/2344b07e82336f49b03e174961f8d46b
https://lightroom.adobe.com/shares/3758f76ec2982b4c9a57af12b2fe491e
https://lightroom.adobe.com/shares/d2b838e2ce19c54e831bc48c2b0015d9
https://lightroom.adobe.com/shares/c4de08ea9e72f14aa273226f741dc7fe
https://lightroom.adobe.com/shares/14d2660662e3ba4f932af1f667806876
https://lightroom.adobe.com/shares/aa8c9c4ddab5574eb4edbe8f189edad7
https://lightroom.adobe.com/shares/0785062d328276429e3f517dfdfa1d5b
https://lightroom.adobe.com/shares/e93292c06fb2884189a7bac4a608943b
https://lightroom.adobe.com/shares/dd285d4421a07c4ab6d82383762b8e7c
https://lightroom.adobe.com/shares/dc41330dbce35a4b85cf811cab718945
https://lightroom.adobe.com/shares/caa369bef8a894408e32d17a6a59b2ca
https://lightroom.adobe.com/shares/44a83320356740448ca14af5915e2574
https://lightroom.adobe.com/shares/69a6849008c2be4d83f0eaa9e5074001
https://lightroom.adobe.com/shares/3c36fbed2759e148a550a223c7635610
https://lightroom.adobe.com/shares/c29868b84c831543bc26e0602c30c376
https://lightroom.adobe.com/shares/9c01d7a465ac11429df9f21937729432
https://lightroom.adobe.com/shares/44667a644d51d24b86e5f37b615a2a13
https://lightroom.adobe.com/shares/15a035e343b5be4b8efcb8be31e4f577
https://lightroom.adobe.com/shares/c3a01a873b513142ac99f719cd5f1a29
https://lightroom.adobe.com/shares/f282b211124fcf4d8e2b653f6f128058
https://lightroom.adobe.com/shares/78c5aba62855834d986f68233bf7b1dd
https://lightroom.adobe.com/shares/a4c2e18b9003c346b94ffc2796357688
https://lightroom.adobe.com/shares/43ce1ce73844dc4bb4369e44adceee11
https://lightroom.adobe.com/shares/cf779e9b11ff354ca7cb8c3add99fc3b
https://lightroom.adobe.com/shares/4c62bd75b0d025499bc25838cbba8c47
https://lightroom.adobe.com/shares/f2fdfaed9790684fa192edcc587386a6
https://lightroom.adobe.com/shares/438cbda01a9eca4db449bb448dc2ca31
https://lightroom.adobe.com/shares/ae68b0639fb2af41929806e19930dd10
https://lightroom.adobe.com/shares/8800c7ea24b1ce4aa6a7eafcfe57641a

穿刺者戈莫克 发表于 昨天 08:10

写的真的很不错
页: [1]
查看完整版本: 苹果、英伟达等科技公司面临潜在国会调查,曾在特朗普白宫宴会捐款 2500 万美元