2026-06-07 归档

今日共收录 735 条安全情报，包含 30 个 CVE，368 篇安全通告，以及 77 篇研究论文。

漏洞预警2026-06-06 发布MEDIUM

A vulnerability has been found in theonedev onedev up to 15.0.5. Affected by this vulnerability is an unknown functionality of the file /projects. The manipulation of the argume...

CVE-2026-11438

该漏洞影响 OneDev 版本 up to 15.0.5。攻击者可通过向 /projects 端点发送特制请求，操纵参数 `project.forkedFromId` 来绕过授权检查，导致未经授权的访问。CVSS 评分为 6.3（中危），攻

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-06-06 发布INFO

A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some unknown processing of the file app/model/LogMod.js of the component Log Viewer Endp...

CVE-2026-11408

A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some unknown processing of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-06-06 发布INFO

Protocol::HTTP2 versions through 1.12 for Perl is vulnerable to a HTTP/2 Bomb. Protocol::HTTP2's inbound HPACK path has no header-list size limit, so a small HTTP/2 request can...

CVE-2026-10725

Protocol::HTTP2 versions through 1.12 for Perl is vulnerable to a HTTP/2 Bomb. Protocol::HTTP2's inbound HPACK path has

历史摘要 · 未重新核验 · NVD

#cve #cwe-409

漏洞预警2026-06-06 发布INFO

The Booking Package plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in versions up to, and including, 1.7.16. This is due to a missing capability...

CVE-2026-9851

The Booking Package plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in versions up to, a

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-06-06 发布INFO

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based SQL Injection via 'compact_album_order_by' Shortcode Parameter in all...

CVE-2026-9829

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based SQL Injectio

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-06 发布INFO

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'location_mess...

CVE-2026-9594

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnera

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-06-06 发布INFO

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Neutralization for Logs in all versions up to, and includin...

CVE-2026-9016

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Ne

历史摘要 · 未重新核验 · NVD

#cve #cwe-117

漏洞预警2026-06-06 发布INFO

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including, 2.96.6. This is due ...

CVE-2026-8839

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key i

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-06-06 发布INFO

The Klamra Paycal for Aspaclaria plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.4 via the 'invoice_id' paramete...

CVE-2026-8611

The Klamra Paycal for Aspaclaria plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-06-06 发布INFO

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 12.4.16. This is due to the plugin not properly v...

CVE-2026-7624

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inc

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

威胁情报2026-06-07 发布INFO

决赛直播｜第四届阿里CTF安全挑战赛

该信息来源于阿里安全响应中心旗下的先知社区，内容为第四届阿里CTF（网络安全技术竞赛）决赛直播通知。阿里CTF是面向安全爱好者的竞赛活动，旨在提升实战技能，不涉及任何漏洞、攻击活动或恶意软件。文章未提及任何CVE、威胁行为体或IOC，因此不

历史摘要 · 未重新核验 · 先知社区

#xianzhi #community #research

威胁情报2026-06-07 发布INFO

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

这是一则阿里云2027届实习生招聘广告，发布于先知社区，旨在招募AI安全领域的顶尖人才。文章不涉及任何漏洞、攻击活动或威胁情报内容，仅为安全团队提供职业发展机会。

历史摘要 · 未重新核验 · 先知社区

#xianzhi #community #research

威胁情报2026-06-07 发布INFO

Control CenterAccess the Akamai platform

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #botnet #ddos

威胁情报2026-06-07 发布INFO

Akamai Security

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #botnet #ddos

威胁情报2026-06-07 发布INFO

Our global infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #botnet #ddos

威胁情报2026-06-07 发布INFO

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

#report #cncert #government

威胁情报2026-06-07 发布INFO

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT

#report #cncert #government

威胁情报2026-06-07 发布INFO

关于“独狼”团伙大规模传播恶意程序的风险提示

历史摘要 · 未重新核验 · CNCERT

#report #cncert #government

威胁情报2026-06-07 发布INFO

关于RCtea僵尸网络大范围传播的风险提示

历史摘要 · 未重新核验 · CNCERT

#report #cncert #government

威胁情报2026-06-07 发布INFO

关于“黑猫”团伙利用搜索引擎传播仿冒Notepad++下载远...

历史摘要 · 未重新核验 · CNCERT

#report #cncert #government