2026-06-03 归档

今日共收录 1204 条安全情报，包含 428 个 CVE，390 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-06-01 发布INFO

Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticate...

CVE-2026-23638

Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerabil

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-06-01 发布INFO

Capsule is a multi-tenancy and policy-based framework for Kubernetes. The Capsule Controller runs with cluster-admin privileges. Although the TenantResource RawItems processing ...

CVE-2026-22872

Capsule is a multi-tenancy and policy-based framework for Kubernetes. The Capsule Controller runs with cluster-admin pri

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-863

漏洞预警2026-06-01 发布INFO

A vulnerability was detected in Bottelet DaybydayCRM up to 2.2.1. Affected is an unknown function of the component Setting Handler. Performing a manipulation results in missing ...

CVE-2026-10283

A vulnerability was detected in Bottelet DaybydayCRM up to 2.2.1. Affected is an unknown function of the component Setti

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-06-01 发布INFO

A security vulnerability has been detected in Bottelet DaybydayCRM up to 2.2.1. This impacts the function view of the file app/Http/Controllers/DocumentsController.php. Such man...

CVE-2026-10282

A security vulnerability has been detected in Bottelet DaybydayCRM up to 2.2.1. This impacts the function view of the fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-06-01 发布INFO

A weakness has been identified in Enderfga claw-orchestrator up to 3.5.5. This affects the function EmbeddedServer of the file src/embedded-server.ts of the component API Endpoi...

CVE-2026-10281

A weakness has been identified in Enderfga claw-orchestrator up to 3.5.5. This affects the function EmbeddedServer of th

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-06-01 发布INFO

A security flaw has been discovered in horizon921 mcpilot 0.1.0. The impacted element is an unknown function of the file client/src/app/api/mcp/call/route.ts of the component MC...

CVE-2026-10280

A security flaw has been discovered in horizon921 mcpilot 0.1.0. The impacted element is an unknown function of the file

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-06-01 发布INFO

A vulnerability was identified in hiraishikentaro wezterm-mcp 0.1.0. The affected element is an unknown function of the file src/wezterm_executor.ts of the component switch_pane...

CVE-2026-10279

A vulnerability was identified in hiraishikentaro wezterm-mcp 0.1.0. The affected element is an unknown function of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-06-01 发布INFO

A vulnerability was determined in ishayoyo excel-mcp up to 1.0.2. Impacted is an unknown function of the file src/index.ts of the component read_file/write_file. Executing a man...

CVE-2026-10278

A vulnerability was determined in ishayoyo excel-mcp up to 1.0.2. Impacted is an unknown function of the file src/index.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-01 发布INFO

A vulnerability was found in j3k0 mcp-google-workspace up to 831790e7d5c2663325733d9f5579cc339a267c4c. This issue affects the function saveToDisk of the file src/tools/gmail.ts ...

CVE-2026-10277

A vulnerability was found in j3k0 mcp-google-workspace up to 831790e7d5c2663325733d9f5579cc339a267c4c. This issue affect

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-284

漏洞预警2026-06-01 发布INFO

A vulnerability has been found in hekmon8 Jenkins-server-mcp 0.1.0. This vulnerability affects the function jobPath of the file src/index.ts of the component get_build_status/ge...

CVE-2026-10276

A vulnerability has been found in hekmon8 Jenkins-server-mcp 0.1.0. This vulnerability affects the function jobPath of t

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-06-01 发布INFO

In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check. This could lead to local escalation of privilege with...

CVE-2026-0072

In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission che

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

漏洞预警2026-06-01 发布INFO

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to version 2.9.0, due to the insufficient sanitization of the `file` argument in the `la...

CVE-2024-52011

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to version 2.9.0, due to the in

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

学术论文2026-05-31 发布INFO

On the History of the Square and Multiply Algorithm

本文系统梳理了平方乘算法（又称二进制幂运算、快速幂算法）的历史起源与发展脉络。该算法是现代密码学（如RSA、Diffie-Hellman密钥交换）和计算数论中实现快速模幂运算的核心技术。尽管该算法广泛应用于安全计算，其历史渊源长期存在争议。

历史摘要 · 未重新核验 · arXiv cs.CR

#math.HO #cryptography #history #square-and-multiply

威胁情报2026-06-03 发布INFO

决赛直播｜第四届阿里CTF安全挑战赛

第四届阿里CTF安全挑战赛决赛于2026年6月3日进行直播，由阿里云先知社区主办。该赛事面向全球安全爱好者，旨在通过CTF（Capture The Flag）形式提升网络安全攻防技能。决赛直播内容包括实时解题过程、专家点评及颁奖环节。文章未

历史摘要 · 未重新核验 · 先知社区

#xianzhi #community #research

威胁情报2026-06-03 发布INFO

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

该内容为阿里云2027届实习生招聘通知，发布于先知社区，旨在招募安全领域的实习生加入AI时代顶尖安全团队。文章不涉及任何威胁情报、漏洞、攻击活动或安全事件，仅提供招聘信息及应聘方式。

历史摘要 · 未重新核验 · 先知社区

#xianzhi #community #research

威胁情报2026-06-03 发布INFO

Control CenterAccess the Akamai platform

历史摘要 · 未重新核验 · Akamai Security Research

#ddos #akamai #botnet

威胁情报2026-06-03 发布INFO

Akamai Security

历史摘要 · 未重新核验 · Akamai Security Research

#ddos #akamai #botnet

威胁情报2026-06-03 发布INFO

Our global infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

#ddos #akamai #botnet

威胁情报2026-06-03 发布INFO

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

#cncert #report #government

威胁情报2026-06-03 发布INFO

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT

#cncert #report #government