【大模型服务平台 TokenHub】关于腾讯云混元多模态模型服务迁移通知
【大模型服务平台 TokenHub】关于腾讯云混元多模态模型服务迁移通知
2026-06-08 归档
今日共收录 689 条安全情报，包含 45 个 CVE，322 篇安全通告，以及 73 篇研究论文。
← 返回归档列表关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
Unified Safe In-context Image Generation in Multimodal Diffusion Transformers via Restricting Unsafe Information Flows
该论文聚焦于多模态扩散变换器（DiT）中图像生成的安全性问题。尽管DiT结合多模态注意力（MM-Attn）已成为图像生成的主流架构，但在图像到图像（I2I）编辑等任务中，防止生成有害内容仍是一大挑战。现有安全机制多针对文本到图像（T2I）合
A vulnerability was found in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file /Administrator/PHP/AdminDeleteAlbum.php. The manipulation o...
CVE-2026-11489
CVE-2026-11489 是一个存在于 code-projects Online Music Site 1.0 中的 SQL 注入漏洞。该漏洞位于文件 /Administrator/PHP/AdminDeleteAlbum.php，攻击
A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown part of the file checkUser.php of the component POST Parameter H...
CVE-2026-11488
CVE-2026-11488 影响 code-projects 开发的 Simple Flight Ticket Booking System 1.0。该漏洞位于 checkUser.php 文件中的 POST 参数处理器，具体是 User
A flaw has been found in Neovim up to 0.12.2. Affected by this issue is the function M.read of the file runtime/lua/vim/secure.lua of the component View Branch. Executing a mani...
CVE-2026-11487
该漏洞影响 Neovim 至版本 0.12.2。问题出现在组件 View Branch 的 runtime/lua/vim/secure.lua 文件的 M.read 函数中。通过操纵参数 path，攻击者可以注入任意命令。攻击需要本地访问
A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /archive1.php. Perfo...
CVE-2026-11486
该漏洞存在于 SourceCodester Class and Exam Timetabling System 1.0 中，具体位于 /archive1.php 文件。攻击者可以通过操纵 sy 参数进行 SQL 注入攻击，无需身份验证即可远
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive2.php. Such manipulation ...
CVE-2026-11485
SourceCodester Class and Exam Timetabling System 1.0 中存在 SQL 注入漏洞。该漏洞位于文件 /archive2.php 中，通过操纵参数 sy，未经身份验证的攻击者可远程注入任意 SQ
A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /archive3.php. This manipulation of the argu...
CVE-2026-11484
SourceCodester Class and Exam Timetabling System 1.0 存在一个SQL注入漏洞，位于 /archive3.php 文件的未知函数中。攻击者可以通过操纵参数 'sy' 实现SQL注入，无需任何
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /archive4.php. The manipulation of the ...
CVE-2026-11483
SourceCodester Class and Exam Timetabling System 1.0 被发现存在一个安全漏洞，影响文件 /archive4.php 中的未知函数。攻击者可以通过远程方式，操纵参数 'sy' 进行 SQL
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /archive5.php. The manipulation o...
CVE-2026-11482
CVE-2026-11482 是 SourceCodester Class and Exam Timetabling System 1.0 中存在的一个 SQL 注入漏洞。该漏洞位于 /archive5.php 文件的一个未具名函数中，攻击
A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the ...
CVE-2026-11481
CVE-2026-11481 影响 yoanbernabeu grepai 软件 0.35.0 及更早版本。该漏洞存在于 Postgres Embedding Cache 组件的 indexer/chunker.go 文件中的 Postgr
A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. Impacted is an unknown function of the file beike/Admin/Routes/admin.php of the compo...
CVE-2026-11480
CVE-2026-11480 是成都亿联网络技术有限公司（Chengdu Everbrite Network Technology）开发的 BeikeShop 电子商务平台中的一个 SQL 注入漏洞。该漏洞影响版本 up to 1.6.0.
A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such man...
CVE-2026-11479
该漏洞影响 yoanbernabeu grepai 0.35.0 版本，位于 Qdrant 后端的 indexer/chunker.go 文件中。由于使用了弱哈希算法，攻击者可能通过远程方式利用此漏洞，但攻击复杂度较高且利用难度大。漏洞细节
A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. This affects the function OAuth2Client of the file hsweb-authorization/hsweb-authorization-oauth2/src/main/ja...
CVE-2026-11477
CVE-2026-11477 是一个影响 hs-web hsweb-framework 至 5.0.1 版本的安全漏洞。该漏洞存在于 hsweb-authorization-oauth2 组件的 OAuth2Client.java 文件中，
A security vulnerability has been detected in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this issue is the function edit-admi...
CVE-2026-11476
Kushan2k student-management-system（一个学生管理系统）存在一处授权不当漏洞，影响版本直至提交 f16a4ceaddd6729c4b306ed4641cda3176c1ef2a。漏洞位于文件 controll
A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this vulnerability is the function getStatus of ...
CVE-2026-11475
CVE-2026-11475 是一个存在于 Kushan2k 学生管理系统（student-management-system）中的 SQL 注入漏洞。该系统采用滚动发布模式，受影响版本为 commit f16a4ceaddd6729c4b
WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the comment func...
CVE-2023-54351
WordPress Sonaar Music插件4.7版本中存在一个存储型跨站脚本（Stored XSS）漏洞，编号为CVE-2023-54351。该漏洞源于插件对用户通过评论功能提交的数据缺乏充分过滤和转义。未经身份验证的攻击者可以利用/
京公网安备 11000002002063号
该条情报来自360CERT安全报告，但标题和内容似乎为公安备案信息而非安全事件报告。无法提取有效的威胁情报细节。建议核实来源链接和原始报告内容。