2026-04-28 归档

今日共收录 1050 条安全情报,包含 258 个 CVE,457 篇安全通告,以及 29 篇研究论文。

← 返回归档列表
安全公告2026-04-28 发布INFO

iOS 15.8.5 and iPadOS 15.8.5

iOS 15.8.5 and iPadOS 15.8.5

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-04-28 发布INFO

iOS 18.6.2 and iPadOS 18.6.2

iOS 18.6.2 and iPadOS 18.6.2

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-04-28 发布INFO

Android Code Search

Android Code Search

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-04-28 发布INFO

Android Devices

Android Devices

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-04-28 发布INFO

Secure an Android device

Secure an Android device

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-04-28 发布INFO

Android 16 QPR2

Android 16 QPR2

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-04-28 发布INFO

Mobile network security

Mobile network security

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-04-28 发布INFO

MFSA 2026-18Security Vulnerabilities fixed in Focus for iOS 148.2

MFSA 2026-18Security Vulnerabilities fixed in Focus for iOS 148.2

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-04-28 发布INFO

MFSA 2026-12Security Vulnerabilities fixed in Firefox for iOS 147.4

MFSA 2026-12Security Vulnerabilities fixed in Firefox for iOS 147.4

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-04-28 发布INFO

MFSA 2026-09Security Vulnerabilities fixed in Firefox for iOS 147.2.1

MFSA 2026-09Security Vulnerabilities fixed in Firefox for iOS 147.2.1

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-04-28 发布INFO

No Title

## Summary After a note-mark owner soft-deletes a public book, its notes and uploaded assets stay readable at `/api/not

历史摘要 · 未重新核验 · GitHub Security Advisories

安全公告2026-04-28 发布INFO

No Title

### Impact The HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site script

历史摘要 · 未重新核验 · GitHub Security Advisories

安全公告2026-04-28 发布INFO

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected element is...

CVE-2026-7243

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setRadvdCfg

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is...

CVE-2026-7234

A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is the function startsWith

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The impacted element...

CVE-2026-7244

A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setWiF

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of...

CVE-2026-7248

A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the...

CVE-2026-7241

A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setWiFiBasicCfg of th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the...

CVE-2026-7221

A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file m

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys.

CVE-2026-32644

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the...

CVE-2026-7204

A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setPptpServerCfg

历史摘要 · 未重新核验 · GitHub Advisory