2026-04-29 归档

今日共收录 828 条安全情报,包含 0 个 CVE,482 篇安全通告,以及 32 篇研究论文。

← 返回归档列表
安全公告2026-04-29 发布INFO

A vulnerability has been found in Campcodes Online Shopping System 1.0. This impacts an unknown...

CVE-2025-9691

A vulnerability has been found in Campcodes Online Shopping System 1.0. This impacts an unknown function of the file /lo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

A security vulnerability has been detected in itsourcecode Student Information System 1.0. This...

CVE-2025-9679

A security vulnerability has been detected in itsourcecode Student Information System 1.0. This affects an unknown funct

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to...

CVE-2026-7361

Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap cor

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

mod_sql in ProFTPD before 1.3.10rc1 allows remote attackers to execute arbitrary code via a...

CVE-2026-42167

mod_sql in ProFTPD before 1.3.10rc1 allows remote attackers to execute arbitrary code via a username, in scenarios where

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote...

CVE-2026-7342

Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote...

CVE-2026-7352

Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromise

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. The impacted element...

CVE-2026-7306

A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. The impacted element is an unknown function o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1...

CVE-2026-37750

A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated re

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

OpenTelemetry's Zipkin remote endpoint cache could grow without bounds and increase memory pressure

CVE-2026-41310

### Summary The Zipkin exporter remote endpoint cache accepted unbounded key growth derived from span attributes. In hi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

PhpSpreadsheet has XSS via number format code with @ text placeholder bypasses htmlspecialchars in HTML writer

CVE-2026-40296

It was discovered that there is a way to bypass HTML escaping in the HTML writer using custom number format codes. ## T

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

FacturaScripts has Insecure Parameter Handling: Unauthorized Modification of Immutable 'nick' Field

CVE-2026-32699

### Summary The application fails to validate the ```nick``` parameter during a ```POST``` request to the ```EditUser```

历史摘要 · 未重新核验 · GitHub Advisory

威胁情报2026-04-29 发布INFO

Firewall for AI

Firewall for AI

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-04-28 发布INFO

Microsoft to deprecate legacy TLS in Exchange Online starting July

Microsoft says it will start blocking legacy TLS connections for POP and IMAP email clients in Exchange Online starting

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-04-29 发布INFO

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-04-29 发布INFO

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-04-29 发布INFO

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-04-29 发布INFO

Security & Identity

Security & Identity

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-04-29 发布INFO

SAP on Google Cloud

SAP on Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-04-29 发布INFO

Inside Google Cloud

Inside Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-04-29 发布INFO

Google Cloud Next & Events

Google Cloud Next & Events

历史摘要 · 未重新核验 · Mandiant