Identity, Credential, and Access Management
Identity, Credential, and Access Management
2026-05-03 归档
今日共收录 715 条安全情报，包含 73 个 CVE，373 篇安全通告，以及 10 篇研究论文。
← 返回归档列表CrowdStrike Expands ChatGPT Enterprise Integration with Enhanced Audit Logging and Activity MonitoringApr 28, 2026
CrowdStrike Expands ChatGPT Enterprise Integration with Enhanced Audit Logging and Activity MonitoringApr 28, 2026
Threat IntelligenceCoruna: The Mysterious Journey of a Powerful iOS Exploit KitBy Google Threat Intelligence Group • 25-minute read
Threat IntelligenceCoruna: The Mysterious Journey of a Powerful iOS Exploit KitBy Google Threat Intelligence Group • 25
Essential Data Sources for Detection Beyond the Endpoint
Unit 42 highlights the need for a comprehensive security strategy that spans every IT zone. Explore the full details her
Defending Against CORDIAL SPIDER and SNARKY SPIDER with Falcon Shield
Defending Against CORDIAL SPIDER and SNARKY SPIDER with Falcon Shield
Microsoft tests modern Windows Run, says it's faster than legacy dialog
Microsoft has confirmed that Windows 11 is getting a new modern Run dialog with dark mode support and faster performance
Edu tech firm Instructure discloses cyber incident, probes impact
Instructure, the company behind the widely used Canvas learning platform, has disclosed that it recently suffered a cybe
15-year-old detained over French govt agency data breach
French authorities have detained a 15-year-old suspected of selling data stolen in a cyberattack on France Titres (ANTS)
Tune In: The Future of AI-Powered Vulnerability Discovery
Tune In: The Future of AI-Powered Vulnerability Discovery
ConsentFix v3 attacks target Azure with automated OAuth abuse
A new attack type, dubbed ConsentFix v3, has been circulating on hacker forums, building on the previous technique by ad
网络安全信息与动态周报-2026年第14期
本报告为国家互联网应急中心（CNCERT）发布的2026年第14期网络安全信息与动态周报。报告汇总了近期国内外网络安全态势，包括漏洞预警、恶意程序活动、网络安全事件等。由于原文摘要未提供具体技术细节，无法得知具体的攻击活动、威胁行为者或受影
CVE-2026-22738-Spring AI SimpleVectorStore 中的 SpEL 注入导致远程代码执行漏洞分析
CVE-2026-22738
CVE-2026-22738-Spring AI SimpleVectorStore 中的 SpEL 注入导致远程代码执行漏洞分析
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-6481
该 CVE 标识符已被其编号机构 (CVE Numbering Authority) 拒绝或撤销，因此不存在有效的漏洞描述、影响范围或风险信息。NVD 收录的记录仅包含拒绝原因，无 CVSS 评分、EPSS 分数、受影响产品列表或厂商信息。
A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function get_tokenizer of the file python/sglang/srt/utils/hf_transformers_utils.py of the compon...
CVE-2026-7669
CVE-2026-7669 是 sgl-project 开发的 SGLang 框架中的一个反序列化漏洞，影响版本 0.5.9 及之前的所有版本。该漏洞位于 HuggingFace Transformer Handler 组件的 python
A security flaw has been discovered in r-huijts mcp-server-rijksmuseum up to 1.0.4. Affected is the function open_image_in_browser of the file src/index.ts of the component MCP ...
CVE-2026-7653
CVE-2026-7653 是一个影响 r-huijts 开发的 mcp-server-rijksmuseum（版本 ≤1.0.4）的 OS 命令注入漏洞。该漏洞位于 src/index.ts 文件中的 open_image_in_brow
A vulnerability was identified in Totolink N300RH 6.1c.1353_B20190305. This impacts the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argu...
CVE-2026-7633
CVE-2026-7633 是一个影响 Totolink N300RH 路由器（固件版本 6.1c.1353_B20190305）的远程文件包含漏洞。漏洞位于 /cgi-bin/cstecgi.cgi 文件的 setUploadSettin
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3...
CVE-2026-3504
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Sensitive Infor
The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all ve...
CVE-2026-2554
The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is
The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xlwcty_current_date' shortcode in all vers...
CVE-2026-0703
The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
A vulnerability was detected in crazyrabbitLTC mcp-code-review-server up to 0.1.0. This issue affects the function executeRepomix of the file src/repomix.ts of the component Rep...
CVE-2026-7628
A vulnerability was detected in crazyrabbitLTC mcp-code-review-server up to 0.1.0. This issue affects the function execu