粤公网安备44030702002388号
粤公网安备44030702002388号
2026-05-23 归档
今日共收录 869 条安全情报，包含 93 个 CVE，394 篇安全通告，以及 104 篇研究论文。
← 返回归档列表Schneider Electric PowerLogic™ Series 800 Power Meter 弱口令
Schneider Electric PowerLogic™ Series 800 Power Meter 弱口令
【智能体开发平台】关于 Hy3 preview、DeepSeek-V4-Pro 模型即将正式商业化的通知
【智能体开发平台】关于 Hy3 preview、DeepSeek-V4-Pro 模型即将正式商业化的通知
【安全通告】关于网页篡改安全风险问题的加固指引
【安全通告】关于网页篡改安全风险问题的加固指引
【TDSQL-C MySQL 版】关于发布 dbclient 2.6.2 的公告
【TDSQL-C MySQL 版】关于发布 dbclient 2.6.2 的公告
【人脸核身】关于人脸核身微信小程序 SDK 升级通知
【人脸核身】关于人脸核身微信小程序 SDK 升级通知
MFSA 2026-51Security Vulnerabilities fixed in Thunderbird 140.11
MFSA 2026-51Security Vulnerabilities fixed in Thunderbird 140.11
MFSA 2026-50Security Vulnerabilities fixed in Thunderbird 151
MFSA 2026-50Security Vulnerabilities fixed in Thunderbird 151
MFSA 2026-48Security Vulnerabilities fixed in Firefox ESR 140.11
MFSA 2026-48Security Vulnerabilities fixed in Firefox ESR 140.11
MFSA 2026-47Security Vulnerabilities fixed in Firefox ESR 115.36
MFSA 2026-47Security Vulnerabilities fixed in Firefox ESR 115.36
MFSA 2026-46Security Vulnerabilities fixed in Firefox 151
MFSA 2026-46Security Vulnerabilities fixed in Firefox 151
【云安全中心】关于旧版控制台"主机防护"、"防护开关"内测功能入口下线的通知
【云安全中心】关于旧版控制台"主机防护"、"防护开关"内测功能入口下线的通知
【人体分析】关于人体检测、人体库管理、人体搜索服务正式退市通知
【人体分析】关于人体检测、人体库管理、人体搜索服务正式退市通知
【文字识别】关于文字识别部分接口下线公告
【文字识别】关于文字识别部分接口下线公告
【大模型服务平台 TokenHub】关于腾讯云混元旧版本模型下线的通知
【大模型服务平台 TokenHub】关于腾讯云混元旧版本模型下线的通知
Nezha Monitoring: Nezha WebSocket server stream discloses cross-tenant server telemetry to authenticated members
CVE-2026-47124
### Summary Any authenticated non-admin member can connect to the server-status WebSocket and receive telemetry for all
Arcane: Missing admin authorization on global variables endpoint
CVE-2026-47125
## Summary The `PUT /api/environments/{id}/templates/variables` endpoint, which writes the system-wide `.env.global` fi
aiograpi: Unsafe signup challenge path handling
CVE-2026-47157
aiograpi versions before 0.9.10 accepted server-supplied signup challenge paths and used them to build request URLs befo
Nezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check)
CVE-2026-47120
## Summary `createAlertRule` and `createService` (and their `update*` siblings) accept `FailTriggerTasks []uint64` and
Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification
CVE-2026-46717
## Summary nezha's dashboard supports two user roles: `RoleAdmin` (Role==0) and `RoleMember` (Role==1). The notificatio