Casdoor versions 2.362.0 and earlier contain a logic flaw in the social‑login binding flow that allows users to bypass configured MFA requirements. The binding‑rule code path in...

CVE-2026-9091

Casdoor versions 2.362.0 and earlier contain a logic flaw in the social‑login binding flow that allows users to bypass c

历史摘要 · 未重新核验 · NVD

When calicoctl is invoked with --log-level=info or --log-level=debug, the client prints the full contents of its loaded connection-configuration struct to stderr in a single log...

CVE-2026-6720

When calicoctl is invoked with --log-level=info or --log-level=debug, the client prints the full contents of its loaded

历史摘要 · 未重新核验 · NVD

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, app.mount() strips the mount prefix from the incoming request path using ...

CVE-2026-47676

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, app.mount() stri

历史摘要 · 未重新核验 · NVD

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the serialize() function in hono/cookie validates domain and path options...

CVE-2026-47675

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the serialize()

历史摘要 · 未重新核验 · NVD

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the ip-restriction middleware (hono/ip-restriction) compares incoming IP ...

CVE-2026-47674

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the ip-restricti

历史摘要 · 未重新核验 · NVD

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the jwt and jwk middlewares do not verify that the Authorization header v...

CVE-2026-47673

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the jwt and jwk

历史摘要 · 未重新核验 · NVD

opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerabil...

CVE-2026-45292

opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing tel

历史摘要 · 未重新核验 · NVD

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its Post...

CVE-2026-44477

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and

历史摘要 · 未重新核验 · NVD

Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash arithmetic expansion $((...)), allowing execution of arbitrary commands ne...

CVE-2026-44466

Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash arithmetic expans

历史摘要 · 未重新核验 · NVD

决赛直播｜第四届阿里CTF安全挑战赛

该文章是先知社区发布的关于第四届阿里CTF安全挑战赛决赛直播的通知。文章主要介绍了决赛直播的时间、观看方式以及赛事背景，不涉及任何安全威胁、漏洞或攻击活动。阿里CTF是阿里巴巴集团主办的安全技术竞赛，旨在提升网络安全爱好者的实战能力，本次直

历史摘要 · 未重新核验 · 先知社区

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

本文是阿里云2027届实习生招聘公告，来自先知社区。内容为招聘信息，包括岗位要求、福利待遇和申请方式，不涉及任何网络安全威胁、漏洞、攻击活动或恶意软件。

历史摘要 · 未重新核验 · 先知社区

网络安全信息与动态周报-2026年第15期

本期周报由国家互联网应急中心（CNCERT）发布，汇总了2026年第15周（2026年4月13日至4月19日）的国内外网络安全信息与动态。报告内容涵盖网络安全事件监测、漏洞预警、恶意程序传播、网站安全态势以及国际网络安全动态等。由于原文未提

历史摘要 · 未重新核验 · CNCERT

[分享]VMProtect3.5.1 x64Dbg插件AntiVmp v1.2发布

[分享]VMProtect3.5.1 x64Dbg插件AntiVmp v1.2发布

历史摘要 · 未重新核验 · 看雪

Control CenterAccess the Akamai platform

Control CenterAccess the Akamai platform

历史摘要 · 未重新核验 · Akamai Security Research

Akamai Security

Akamai Security

历史摘要 · 未重新核验 · Akamai Security Research

Our global infrastructure

Our global infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

OpenClaw安全使用实践指南

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

关于OpenClaw安全应用的风险提示

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT

关于“独狼”团伙大规模传播恶意程序的风险提示

关于“独狼”团伙大规模传播恶意程序的风险提示

历史摘要 · 未重新核验 · CNCERT

关于RCtea僵尸网络大范围传播的风险提示

关于RCtea僵尸网络大范围传播的风险提示

历史摘要 · 未重新核验 · CNCERT