2026-05-05 归档

今日共收录 918 条安全情报,包含 208 个 CVE,383 篇安全通告,以及 47 篇研究论文。

← 返回归档列表
漏洞预警2026-05-04 发布INFO

A vulnerability was found in PrefectHQ prefect up to 3.6.25.dev6. Affected by this issue is some unknown functionality of the file src/prefect/runner/storage.py of the component...

CVE-2026-7725

A vulnerability was found in PrefectHQ prefect up to 3.6.25.dev6. Affected by this issue is some unknown functionality o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerability is the function validate_restricted_url of the component Webhook/Notificati...

CVE-2026-7724

A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerability is the function va

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of the component WebSocket Endpoint. Executing a manipulation...

CVE-2026-7723

A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was detected in PrefectHQ prefect up to 3.6.21. This impacts the function endswith of the file /api/health of the component Health Check API. Performing a manipu...

CVE-2026-7722

A vulnerability was detected in PrefectHQ prefect up to 3.6.21. This impacts the function endswith of the file /api/heal

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A security vulnerability has been detected in Totolink WA300 5.2cu.7112_B20190227. This affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. Such manipulation ...

CVE-2026-7721

A security vulnerability has been detected in Totolink WA300 5.2cu.7112_B20190227. This affects the function NTPSyncWith

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A weakness has been identified in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST...

CVE-2026-7720

A weakness has been identified in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setLanguageC

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was identified in Totolink WA300 5.2cu.7112_B20190227. Impacted is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component POST Request Hand...

CVE-2026-7718

A vulnerability was identified in Totolink WA300 5.2cu.7112_B20190227. Impacted is the function setWebWlanIdx of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component POST ...

CVE-2026-7717

A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. This issue affects the function UploadCustomModul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0. This vulnerability affects unknown code of the file /index.php. Performing a manipula...

CVE-2026-7716

A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0. This vulnerability affects u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability has been found in ravenwits mcp-server-arangodb up to 0.4.7. This affects the function arango_backup of the file src/tools.ts of the component MCP Interface. Suc...

CVE-2026-7715

A vulnerability has been found in ravenwits mcp-server-arangodb up to 0.4.7. This affects the function arango_backup of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious...

CVE-2026-7371

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoV

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to credenti...

CVE-2026-42367

A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious...

CVE-2026-42366

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoV

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an ...

CVE-2026-42365

A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary...

CVE-2026-42364

An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Velociraptor versions prior to 0.76.4 contain a resource exhaustion vulnerability in the server's agent control channel. This allows a compromised or rogue Velociraptor clien...

CVE-2026-6948

Velociraptor versions prior to 0.76.4 contain a resource exhaustion vulnerability in the server's agent control channel.

历史摘要 · 未重新核验 · NVD

学术论文2026-05-04 发布INFO

Design and Performance Evaluation of a BLE-Based IoT Authentication System

本文针对蓝牙低功耗(BLE)物联网系统中的安全与通信可靠性挑战,设计并实现了一个基于BLE的身份认证系统。系统使用工业级nRF5340开发套件,包含一个带有键盘的外围节点(用于输入PIN码)和一个带有LCD显示屏的中心节点(用于验证结果显示

历史摘要 · 未重新核验 · arXiv cs.CR

威胁情报2026-05-05 发布INFO

决赛直播|第四届阿里CTF安全挑战赛

第四届阿里CTF安全挑战赛将于2026年5月5日进行决赛直播,由阿里云先知社区主办。作为面向全球安全研究人员的CTF竞赛,本届比赛涵盖逆向工程、二进制漏洞利用、Web安全、密码学等多个领域,旨在挖掘和培养网络安全人才。决赛采用现场攻防对抗模

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-05-05 发布INFO

新司令18家通杀!2025双11安全保卫战最终奖励揭榜

本文来自先知社区,标题为“新司令18家通杀!2025双11安全保卫战最终奖励揭榜”。内容主要报道了2025年双11期间举办的某安全保卫战活动的最终获奖名单,其中“新司令”团队成功攻破了18家目标,获得了通杀奖项。文章公布了获奖团队、奖励细节

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-05-05 发布INFO

阿里CTF 2026火热来袭!顶尖阵容 × AI融合 × 一血豪礼,等你来战!

本文是阿里CTF 2026安全竞赛的宣传文章,发布于先知社区。内容主要介绍竞赛的亮点:顶尖参赛阵容、AI融合创新竞赛模式以及一血(First Blood)奖励。没有涉及任何实际网络攻击事件、漏洞披露、恶意软件或威胁情报。文章属于社区活动推广

历史摘要 · 未重新核验 · 先知社区