Tune In: The Future of AI-Powered Vulnerability Discovery
Tune In: The Future of AI-Powered Vulnerability Discovery
2026-05-04 归档
今日共收录 673 条安全情报，包含 62 个 CVE，343 篇安全通告，以及 15 篇研究论文。
← 返回归档列表Instructure confirms data breach, ShinyHunters claims attack
Educational tech giant Instructure has confirmed that data was stolen in a cyberattack, with the ShinyHunters extortion
Microsoft Defender wrongly flags DigiCert certs as Trojan:Win32/Cerdigent.A!dha
Microsoft Defender is detecting legitimate DigiCert root certificates as Trojan:Win32/Cerdigent.A!dha, resulting in wide
Telegram Mini Apps abused for crypto scams, Android malware delivery
Cybersecurity researchers have uncovered a large-scale fraud operation that uses Telegram's Mini App feature to run cryp
网络安全信息与动态周报-2026年第13期
本报告为CNCERT（国家互联网应急中心）发布的2026年第13期网络安全信息与动态周报，发布日期为2026年4月17日。周报通常包含以下内容：一周网络安全态势综述、重要漏洞预警（如高危远程代码执行漏洞）、恶意程序活动监测（如僵尸网络、勒索
网络安全信息与动态周报-2026年第14期
本期周报由CNCERT（国家计算机网络应急技术处理协调中心）于2026年5月4日发布，属于第14期。报告汇总了2026年4月17日至5月4日期间的网络安全动态，通常涵盖以下内容：漏洞与威胁通报（如高危漏洞预警、已公开利用的漏洞）、恶意程序活
CVE-2026-22738-Spring AI SimpleVectorStore 中的 SpEL 注入导致远程代码执行漏洞分析
CVE-2026-22738
CVE-2026-22738-Spring AI SimpleVectorStore 中的 SpEL 注入导致远程代码执行漏洞分析
CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV
CVE-2026-31431
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a recently disclosed security flaw impa
A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to credenti...
CVE-2026-42367
CVE-2026-42367 是 GeoVision LPC2011/LPC2211 网络摄像机固件版本 1.10 中 Web 界面 / ssi.cgi 功能存在的一个权限提升漏洞。该漏洞允许低权限攻击者通过向 /ssi.cgi 发送特制的
A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this vulnerability is the function generate_auth_token of the file cps/kobo_auth.py...
CVE-2026-7713
A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this vulnerability is the
A security vulnerability has been detected in MindsDB up to 26.01. Affected is the function pickle.loads of the component Pickle Handler. The manipulation leads to deserializati...
CVE-2026-7712
A security vulnerability has been detected in MindsDB up to 26.01. Affected is the function pickle.loads of the componen
A weakness has been identified in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/handlers/byom_handler/proc_wrapper.py of the component Eng...
CVE-2026-7711
A weakness has been identified in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/h
A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the file JwtAuthenticationTokenFilter.java of the component ...
CVE-2026-7710
A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the
Velociraptor versions prior to 0.76.4 contain a resource exhaustion vulnerability in the server's agent control channel. This allows a compromised or rogue Velociraptor clien...
CVE-2026-6948
Velociraptor versions prior to 0.76.4 contain a resource exhaustion vulnerability in the server's agent control channel.
A vulnerability was identified in janeczku Calibre-Web up to 0.6.26. The impacted element is the function generate_auth_token of the file cps/kobo_auth.py of the component Endpo...
CVE-2026-7709
A vulnerability was identified in janeczku Calibre-Web up to 0.6.26. The impacted element is the function generate_auth_
A vulnerability was determined in Open5GS up to 2.7.7. The affected element is the function ogs_dbi_subscription_data in the library /lib/dbi/subscription.c of the component UDR...
CVE-2026-7708
A vulnerability was determined in Open5GS up to 2.7.7. The affected element is the function ogs_dbi_subscription_data in
A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function udr_nudr_dr_handle_subscription_context of the file /src/udr/nudr-handler.c of the component UDR. The ...
CVE-2026-7707
A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function udr_nudr_dr_handle_subscription_context of th
A vulnerability has been found in Open5GS up to 2.7.7. This issue affects the function gmm_handle_service_request of the file /src/amf/gmm-handler.c of the component AMF. The ma...
CVE-2026-7706
A vulnerability has been found in Open5GS up to 2.7.7. This issue affects the function gmm_handle_service_request of the
A flaw has been found in JD Cloud JDCOS 4.5.1.r4518. This vulnerability affects the function set_iptv_info of the file /jdcap of the component Service Interface. Executing a man...
CVE-2026-7705
A flaw has been found in JD Cloud JDCOS 4.5.1.r4518. This vulnerability affects the function set_iptv_info of the file /
A vulnerability has been found in AV Stumpfl Pixera Two Media Server up to 25.1 R2. The affected element is an unknown function of the component Service Port 1338. Such manipula...
CVE-2026-7704
A vulnerability has been found in AV Stumpfl Pixera Two Media Server up to 25.1 R2. The affected element is an unknown f