CrowdStrike Named a Leader in the First-Ever Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies
CrowdStrike Named a Leader in the First-Ever Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies
2026-05-11 归档
今日共收录 747 条安全情报，包含 109 个 CVE，376 篇安全通告，以及 5 篇研究论文。
← 返回归档列表JDownloader site hacked to replace installers with Python RAT malware
The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windo
[原创]被 Lazarus 组织 长期利用的漏洞：Windows AppLocker 权限提升内核漏洞复现
[原创]被 Lazarus 组织 长期利用的漏洞：Windows AppLocker 权限提升内核漏洞复现
Hackers abuse Google ads, Claude.ai chats to push Mac malware
Attackers are abusing Google Ads and legitimate Claude.ai shared chats in an active malvertising campaign. Users searchi
Police shut down reboot of Crimenetwork marketplace, arrest admin
German authorities have shut down a relaunch version of the criminal marketplace 'Crimenetwork' that generated more than
网络安全信息与动态周报-2026年第13期
该周报由国家互联网应急中心（CNCERT）发布，汇总了2026年第13周国内外网络安全动态信息。报告内容通常包括：重要漏洞预警、恶意程序传播情况、网络攻击事件、安全威胁趋势分析等。由于本周报未提供具体细节，无法获知具体攻击事件或漏洞详情。
网络安全信息与动态周报-2026年第14期
本报告是CNCERT发布的2026年第14期网络安全信息与动态周报，汇总了近期国内网络安全态势。报告通常涵盖重要漏洞预警、恶意程序活动、钓鱼攻击、数据泄露等事件，并提供应急处置建议。本期报告未指明特定攻击活动或漏洞，但强调了日常安全监测和防
Apache Camel JMS 反序列化(CVE-2026-40860)漏洞分析
CVE-2026-40860
Apache Camel JMS 反序列化(CVE-2026-40860)漏洞分析
Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak
CVE-2026-7482
Cybersecurity researchers have disclosed a critical security vulnerability in Ollama that, if successfully exploited, co
A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function get_log_file of the file /goform/getLogFile of the component httpd. T...
CVE-2026-8265
CVE-2026-8265 是 Tenda AC6 路由器固件版本 15.03.06.23 中存在的一个 OS 命令注入漏洞。该漏洞位于 httpd 组件的 /goform/getLogFile 功能中，通过操控参数 wans.flag，攻
A vulnerability was determined in Squirrel up to 3.2. This affects the function SQFunctionProto::Load of the file squirrel/sqobject.cpp. This manipulation causes heap-based buff...
CVE-2026-8261
CVE-2026-8261 影响 Squirrel 脚本引擎 3.2 及之前版本。漏洞位于文件 squirrel/sqobject.cpp 的 SQFunctionProto::Load 函数中，由于对输入数据边界验证不足，导致堆缓冲区溢出
A vulnerability has been found in Tenda AC6 2.0/15.03.06.23. The affected element is an unknown function of the file /goform/telnet of the component httpd. The manipulation of t...
CVE-2026-8259
该漏洞影响 Tenda AC6 路由器固件版本 2.0/15.03.06.23。漏洞位于 httpd 组件的 /goform/telnet 文件中，通过操纵参数 lan.ip 可导致操作系统命令注入。攻击者可以远程利用该漏洞，但需要拥有管理
A vulnerability was detected in Open5GS up to 2.7.7. The affected element is the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of the component...
CVE-2026-8248
A vulnerability was detected in Open5GS up to 2.7.7. The affected element is the function update_authorized_pcc_rule_and
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the mid...
CVE-2026-8177
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing trunc
Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" an...
CVE-2026-45191
Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values,
Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or...
CVE-2026-45190
Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allo
Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids. If the communication channel to the statsd daemon is not secured (for example, by sending UDP pa...
CVE-2026-45180
Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids. If the communication channel to the sta
Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses. If the communication channel to the statsd daemon is not secured (for example, by sending U...
CVE-2026-45179
Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses. If the communication channel to th
WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the tab parame...
CVE-2022-50970
WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows authenticated attackers t
uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module. The date_created, date_from, date_to, and created_at parameter...
CVE-2022-50969
uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module. The d