OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability in MS Teams thread...
CVE-2026-41365
OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability in MS Teams thread history fetched via Graph
2026-04-28 归档
今日共收录 1050 条安全情报，包含 258 个 CVE，457 篇安全通告，以及 29 篇研究论文。
← 返回归档列表OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in...
CVE-2026-41362
OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in the Zalo webhook repla
OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec...
CVE-2026-41369
OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to fi
OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload...
CVE-2026-41364
OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload that allows remote attack
When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write...
CVE-2026-40977
When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file'
A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected...
CVE-2026-7199
A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability i
A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the...
CVE-2026-7183
A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the function rls::DecodeRlsMess
A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This...
CVE-2026-7194
A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown functi
When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform...
CVE-2026-40971
When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification w
An attacker on the same network as the remote application may be able to utilize a timing attack...
CVE-2026-40972
An attacker on the same network as the remote application may be able to utilize a timing attack to discover information
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
Why Secure Data Movement Is the Zero Trust Bottleneck Nobody Talks About
Every security program is betting on the same assumption: once a system is connected, the problem is solved. Open a tick
MAS-SZZ: Multi-Agentic SZZ Algorithm for Vulnerability-Inducing Commit Identification
精确识别漏洞引入提交（Vulnerability-Inducing Commit）是软件安全领域多项任务（如漏洞检测、受影响版本分析）的基础。传统的SZZ算法通过追溯代码历史来定位最早修改漏洞代码的提交，但现有方法（如定制化V-SZZ和当前
X-NegoBox: An Explainable Privacy-Budget Negotiation Framework for Secure Peer-to-Peer Energy Data Exchange
论文提出 X-NegoBox，一个用于点对点能源数据安全交换的透明隐私预算协商框架。现代能源系统正从集中式向分布式转变，消费者转变为产消者，持续与聚合器、对等节点和市场运营商交换数据。虽然这些数据对点对点交易、需求响应和分布式预测至关重要，
京ICP证080047号[京ICP备08010314号-6]
京ICP证080047号[京ICP备08010314号-6]
京网文〔2020〕6051-1195号
京网文〔2020〕6051-1195号
（总）网出证（京）字第281号
（总）网出证（京）字第281号
京公网安备 11000002002063号
京公网安备 11000002002063号
CrowdStrike Falcon Platform Achieves 441% ROI in Three Years
CrowdStrike Falcon Platform Achieves 441% ROI in Three Years
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019