yun2025 发表于 昨天 22:37

上交所:沪市上市公司总市值超65万亿元

上交所:沪市上市公司总市值超65万亿元

Velociraptor:取证查询插件对外连接前缺少权限核验

11月7日公开的漏洞记录CVE-2026-85737涉及Velociraptor。该工具用于查询主机状态,其SQL插件能够连接外部数据库。部分连接路径在使用调用方提供的连接字符串前,没有执行插件级别的网络或文件读取权限检查。由此,原本只获准进行有限查询的调用方可能触发超出授权范围的数据库连接。版本清单标出的受影响范围包括低于0.77.2。

这条记录给出的CVSS 3.1基础评分为6.5分,分级为中危。按照评分列出的条件,利用者可通过网络接触相关功能,需要已有低权限账户或相当的访问权,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/9b03d7975aa21c459d0c086307a40b2c
https://lightroom.adobe.com/shares/16c4888dae73104880187c5d993a5386
https://lightroom.adobe.com/shares/a8a3ffd442858b4281ef70a490ff8da5
https://lightroom.adobe.com/shares/7e5063eebbb6a34b83ae01e4e1fcd8c7
https://lightroom.adobe.com/shares/78d003728f6cd947a21f2dd00766d082
https://lightroom.adobe.com/shares/769c89e6cf53094784a6a5cd42ab9d66
https://lightroom.adobe.com/shares/1ca19106a75191468d0452a95ce9ba02
https://lightroom.adobe.com/shares/f2c2c8defc3af642875d58bacf642ead
https://lightroom.adobe.com/shares/07835be5f2b2fc41b21276ce70c68253
https://lightroom.adobe.com/shares/d14a4b7e87546048918e367aff30c91c
https://lightroom.adobe.com/shares/00715f775dc80242bb50ed8762cb8044
https://lightroom.adobe.com/shares/1b99ad89b3a4cb49b5318232acd84293
https://lightroom.adobe.com/shares/7433cb2f400941498fe33d0c59441097
https://lightroom.adobe.com/shares/dcb9d4d2c217ce439b61835a86bf8fca
https://lightroom.adobe.com/shares/0fa27fd8dccb92449e1f12533c555b54
https://lightroom.adobe.com/shares/d723b2dd878b4d44a4316c71c2a04877
https://lightroom.adobe.com/shares/428bb143c828b1489ee66a4715e3d9f9
https://lightroom.adobe.com/shares/35e717d831b9f84d945690b3374c99f2
https://lightroom.adobe.com/shares/3abbf1d550ba9043a3d509213a253833
https://lightroom.adobe.com/shares/4f79ab67b12fe04db66f3e30b1afa067
https://lightroom.adobe.com/shares/75a5f885e91e6b4897f7ee5077edf475
https://lightroom.adobe.com/shares/1528d2bb9b12444784b8f9999f8be545
https://lightroom.adobe.com/shares/258e33b24f908d4191031351f6310267
https://lightroom.adobe.com/shares/a2c86b59c0fbcc4ca3e6d993edb50ae3
https://lightroom.adobe.com/shares/047fe32000750e488038fe4c2f6e4b76
https://lightroom.adobe.com/shares/4ff64b87af9e9145aac1c09ce25fb5cb
https://lightroom.adobe.com/shares/5772d8dd6ae9d4478ab2c7365eb5dc16
https://lightroom.adobe.com/shares/851372da47a1b34391797c4ddeddf5d8
https://lightroom.adobe.com/shares/5b23a55e0137aa428ca5c577f0de0940
https://lightroom.adobe.com/shares/47bf370e2277a349817ecc3bf36e7ef8
https://lightroom.adobe.com/shares/ed0a8bc50a984347b6886569e3bae60f
https://lightroom.adobe.com/shares/62306a0b96bb12419f32a3ae04239351
https://lightroom.adobe.com/shares/7c2eb03d0f5b094f849d3183192ad0af
https://lightroom.adobe.com/shares/5e6a1b39998e42479d4e502c1e6de759
https://lightroom.adobe.com/shares/921e5adb14220645a0afbb9071196d3e
https://lightroom.adobe.com/shares/68f687c159dba74aa329bc334da37d18
https://lightroom.adobe.com/shares/3714b52369bf73438f4e804c7fd5edff
https://lightroom.adobe.com/shares/402b22f213f37b4aa571ff36d1f1e0fd
https://lightroom.adobe.com/shares/1f7851413c889e4fab8117ab02d441bf
https://lightroom.adobe.com/shares/8bde138aaeec03418554ced2744c80b5
https://lightroom.adobe.com/shares/61deac40bbf30049810636222bb41e80
https://lightroom.adobe.com/shares/32ad8b2f6e4eae479d41d587d9a8e42e
https://lightroom.adobe.com/shares/bc004e920445d34598ad540f71a3b4f1
https://lightroom.adobe.com/shares/3b29b4915ebf5a458430a675ab8d1073
https://lightroom.adobe.com/shares/3a8d202b6fb1894681d7f2494786cbae
https://lightroom.adobe.com/shares/eff50021c2f4694c918946db98e4b7e3
https://lightroom.adobe.com/shares/a9c0c5e8871cac4c89a79cf838a29376
https://lightroom.adobe.com/shares/0e482f0cce722a49920a385590b6764c
https://lightroom.adobe.com/shares/f201cb6d3cea6c4a8e8251f43a7a360c
https://lightroom.adobe.com/shares/cbb7c97ec6ceef4998d6b484ad77d3e4

莫格穆洛克 发表于 昨天 22:38

好好 学习了 确实不错
页: [1]
查看完整版本: 上交所:沪市上市公司总市值超65万亿元