谷歌 YouTube 回应“半浅半深”界面：不是 Bug，测试“拼接”增强沉浸感

yun2025

谷歌 YouTube 回应“半浅半深”界面：不是 Bug，测试“拼接”增强沉浸感

Velociraptor：取证查询插件对外连接前缺少权限核验

11月7日公开的漏洞记录CVE-2026-85737涉及Velociraptor。该工具用于查询主机状态，其SQL插件能够连接外部数据库。部分连接路径在使用调用方提供的连接字符串前，没有执行插件级别的网络或文件读取权限检查。由此，原本只获准进行有限查询的调用方可能触发超出授权范围的数据库连接。版本清单标出的受影响范围包括低于0.77.2。

这条记录给出的CVSS 3.1基础评分为6.5分，分级为中危。按照评分列出的条件，利用者可通过网络接触相关功能，需要已有低权限账户或相当的访问权，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU3ODA2MzE1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODA2NTcwNA==.html
https://v.youku.com/v_show/id_XNjU3ODA2NTY5Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzc2NjE4MA==.html
https://v.youku.com/v_show/id_XNjU4Nzc2ODkwOA==.html
https://v.youku.com/v_show/id_XNjU4Nzc2NzI3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODA2NTYzMg==.html
https://v.youku.com/v_show/id_XNjU3ODA2NTYxMg==.html
https://v.youku.com/v_show/id_XNjU4Nzc2NzI1Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzc2NzI0NA==.html
https://v.youku.com/v_show/id_XNjU4Nzc2NzIzMg==.html
https://v.youku.com/v_show/id_XNjU4Nzc2MzA0NA==.html
https://v.youku.com/v_show/id_XNjU4Nzc2MTQwMA==.html
https://v.youku.com/v_show/id_XNjU4Nzc2MzAyOA==.html
https://v.youku.com/v_show/id_XNjU3ODA2Mjk5Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzc1OTgxMg==.html
https://v.youku.com/v_show/id_XNjU4Nzc2Mjk4NA==.html
https://v.youku.com/v_show/id_XNjU3ODA2Mjk0MA==.html
https://v.youku.com/v_show/id_XNjU3ODA2NDM2OA==.html
https://v.youku.com/v_show/id_XNjU4Nzc1OTc3Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzc1OTc2OA==.html
https://v.youku.com/v_show/id_XNjU3ODA2NDM0NA==.html
https://v.youku.com/v_show/id_XNjU3ODA1OTg3Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzc2Mjk0NA==.html
https://v.youku.com/v_show/id_XNjU3ODA1OTg2MA==.html
https://v.youku.com/v_show/id_XNjU3ODA2MTQ2MA==.html
https://v.youku.com/v_show/id_XNjU4Nzc2NTg3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODA2MjgyNA==.html
https://v.youku.com/v_show/id_XNjU3ODA2NDI2NA==.html
https://v.youku.com/v_show/id_XNjU4Nzc1OTY4NA==.html
https://v.youku.com/v_show/id_XNjU4Nzc2Mjg4MA==.html
https://v.youku.com/v_show/id_XNjU4Nzc2Mjg2MA==.html
https://v.youku.com/v_show/id_XNjU3ODA2NDI2MA==.html
https://v.youku.com/v_show/id_XNjU4Nzc1OTY3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODA2NDI1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODA2MTMxNg==.html
https://v.youku.com/v_show/id_XNjU4Nzc1ODEwOA==.html
https://v.youku.com/v_show/id_XNjU4Nzc2NTcyOA==.html
https://v.youku.com/v_show/id_XNjU4Nzc1ODA4NA==.html
https://v.youku.com/v_show/id_XNjU3ODA2Mjc0NA==.html
https://v.youku.com/v_show/id_XNjU3ODA2MjczMg==.html
https://v.youku.com/v_show/id_XNjU3ODA2MjcyNA==.html
https://v.youku.com/v_show/id_XNjU4Nzc2MTE2NA==.html
https://v.youku.com/v_show/id_XNjU3ODA2NDE4NA==.html
https://v.youku.com/v_show/id_XNjU3ODA2MTIxNg==.html
https://v.youku.com/v_show/id_XNjU3ODA2MTIxMg==.html
https://v.youku.com/v_show/id_XNjU4Nzc1Nzk2MA==.html
https://v.youku.com/v_show/id_XNjU3ODA2MTE4OA==.html
https://v.youku.com/v_show/id_XNjU3ODA1OTU1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODA2MTE1Mg==.html