yun2025 发表于 昨天 11:09

巴西成立电动汽车工作组,推动交通低碳转型

巴西成立电动汽车工作组,推动交通低碳转型

Velociraptor:取证查询插件对外连接前缺少权限核验

11月7日公开的漏洞记录CVE-2026-85737涉及Velociraptor。该工具用于查询主机状态,其SQL插件能够连接外部数据库。部分连接路径在使用调用方提供的连接字符串前,没有执行插件级别的网络或文件读取权限检查。由此,原本只获准进行有限查询的调用方可能触发超出授权范围的数据库连接。版本清单标出的受影响范围包括低于0.77.2。

这条记录给出的CVSS 3.1基础评分为6.5分,分级为中危。按照评分列出的条件,利用者可通过网络接触相关功能,需要已有低权限账户或相当的访问权,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/63af5c564f4a8d42bfda9bc4f7db8dad
https://lightroom.adobe.com/shares/560d8614f0287044869f7cc333d23463
https://lightroom.adobe.com/shares/7aed03adf46d1347b2e073da9ac73cc1
https://lightroom.adobe.com/shares/7d2d436e0a0c1a44a5a67f275b97887f
https://lightroom.adobe.com/shares/2b53c1c88d8dff409d3b83150800bafd
https://lightroom.adobe.com/shares/99a657081d632148865656e7b4f30442
https://lightroom.adobe.com/shares/487f1839a757544590dd13756f126e41
https://lightroom.adobe.com/shares/f763b5d1b07b654ca28242bccc443b0b
https://lightroom.adobe.com/shares/b97a3aac64214b4eb0275618f78f3a0f
https://lightroom.adobe.com/shares/d5e953c73183874ab68dbf94276802bf
https://lightroom.adobe.com/shares/3496a6e5c87b784db9a012bf736b2cd3
https://lightroom.adobe.com/shares/1970260adbb15342b57d6668d4708ad7
https://lightroom.adobe.com/shares/26a543aa75c415468e1949adffc5aeaa
https://lightroom.adobe.com/shares/548e2f9b56b3344d93ff5ed9b402dca4
https://lightroom.adobe.com/shares/29770993e024bf4c855fdf7e7a50b162
https://lightroom.adobe.com/shares/4ab6da630d45d14281f3445e84cacf35
https://lightroom.adobe.com/shares/d15d2bdf8cf92b47beeaf7ddbaee7722
https://lightroom.adobe.com/shares/05730f52990b7741ac4fb5d595cce280
https://lightroom.adobe.com/shares/7ab87ba7bc21ae4aa7be9616401c5cd5
https://lightroom.adobe.com/shares/bfc0ec4d7a7f0c4c93c2e28c240415b7
https://lightroom.adobe.com/shares/783f380f8337d6409f938dd7702269cd
https://lightroom.adobe.com/shares/168b966839fa5d42bfbd9505051e6e36
https://lightroom.adobe.com/shares/d0029506e5eba54b81cc303a89879c39
https://lightroom.adobe.com/shares/c6a63a8afa1b414b9deb25bcc68c7881
https://lightroom.adobe.com/shares/9ed7b0ed5fdab34ea092589def67604e
https://lightroom.adobe.com/shares/15335b447c1dc145ba35c27c82afe824
https://lightroom.adobe.com/shares/0747d6f6e172d64d8b6284bb6278240a
https://lightroom.adobe.com/shares/8e845ec2f267da4cbef54f517a691eb5
https://lightroom.adobe.com/shares/cca3858a910ff04980fd800309fdbfa8
https://lightroom.adobe.com/shares/10f29b990393b7498ea44dd80cb53eff
https://lightroom.adobe.com/shares/d172cb20e48980469c2b5f35bbdbf502
https://lightroom.adobe.com/shares/49e9f4fd260f3446932a5dbed87c9f55
https://lightroom.adobe.com/shares/c08b91058a803f43b5fb68b25951d47d
https://lightroom.adobe.com/shares/8a9e6fb8973d684b8adf16130e1674b7
https://lightroom.adobe.com/shares/a64de858496e404f9282c2b6be1db200
https://lightroom.adobe.com/shares/b83dcead3905b44eb0a4af302f84e039
https://lightroom.adobe.com/shares/832d37b41858034fa3886c82f5c86b83
https://lightroom.adobe.com/shares/a468ebe2bbf82f4dba76b42a613dd47c
https://lightroom.adobe.com/shares/01558de265ae814989c5b7addafeebbf
https://lightroom.adobe.com/shares/253b63bda9db834ebb12beb960a8d1c9
https://lightroom.adobe.com/shares/7e438a6b3e28e046956d267facb3561a
https://lightroom.adobe.com/shares/9f4cc33f2e4a914c9062b3fa937616d8
https://lightroom.adobe.com/shares/d32a8f1b18770840b0ec1b0e3ff55bea
https://lightroom.adobe.com/shares/af4af69ba51f5a438d587aeb2dd5c8f6
https://lightroom.adobe.com/shares/30bcdc42ed8ce84ca93a2b09f26d56d1
https://lightroom.adobe.com/shares/72ac670e2f18ff43852761167289dcee
https://lightroom.adobe.com/shares/a792294b86142942ae69887c52ecd1a9
https://lightroom.adobe.com/shares/2c08b1f7bd23fb4cb6c98b355e253f8a
https://lightroom.adobe.com/shares/1fa5fe189560244d866b42a1562d5355
https://lightroom.adobe.com/shares/a77ee6b6a74e284db853e94c70fa0619

艾萨斯 发表于 昨天 11:17

沙发!沙发!
页: [1]
查看完整版本: 巴西成立电动汽车工作组,推动交通低碳转型