2026-06-13 归档

今日共收录 1165 条安全情报，包含 370 个 CVE，402 篇安全通告，以及 115 篇研究论文。

漏洞预警2026-06-12 发布INFO

form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are conc...

CVE-2026-12143

form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argumen

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

漏洞预警2026-06-12 发布INFO

The Aqara IAM/SSO Gateway (gw-builder.aqara.com) provides an open redirect, which is an instance of "CWE-601: URL Redirection to Untrusted Site," with an estimated CVSS of CVSS:...

CVE-2026-50089

The Aqara IAM/SSO Gateway (gw-builder.aqara.com) provides an open redirect, which is an instance of "CWE-601: URL Redire

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-06-12 发布INFO

The Aqara IAM/SSO gateway (gw-builder.aqara.com) exhibits a cross-origin request sharing vulnerability, which is an instance of "CWE-942: Permissive Cross-domain Policy with Unt...

CVE-2026-50087

The Aqara IAM/SSO gateway (gw-builder.aqara.com) exhibits a cross-origin request sharing vulnerability, which is an inst

历史摘要 · 未重新核验 · NVD

#cve #cwe-942

漏洞预警2026-06-12 发布INFO

Nuxt is an open-source web development framework for Vue.js. From versions 3.11.0 to before 3.21.7 and 4.0.0 to before 4.4.7, there is a route-rule middleware bypass via case-se...

CVE-2026-53721

Nuxt is an open-source web development framework for Vue.js. From versions 3.11.0 to before 3.21.7 and 4.0.0 to before 4

历史摘要 · 未重新核验 · NVD

#cve #cwe-178 #cwe-863

漏洞预警2026-06-12 发布INFO

Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.11.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6 and @nuxt/nitro-server versions 3.20.0 to...

CVE-2026-47200

Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.11.0 to before 3.21.6 and 4.0.0-alpha.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-288

漏洞预警2026-06-12 发布INFO

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path Traversal vulnerability, allowing authenticated remote attackers to exploit this vulnera...

CVE-2026-11847

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path Traversal vulnerability, allowi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-12 发布INFO

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitrary File Deletion vulnerability, allowing authenticated remote attackers to exploit thi...

CVE-2026-11846

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitrary File Deletion vulnerabilit

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-12 发布INFO

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, allowing privileged remote attackers to inject arbitrary OS...

CVE-2026-11845

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, al

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-12 发布INFO

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, allowing privileged remote attackers to access files outside...

CVE-2026-11844

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, all

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-11 发布INFO

Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validation flaw within its internal web-page verification routines...

CVE-2026-45173

Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-346

漏洞预警2026-06-11 发布INFO

OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allows paired nodes to forge exec lifecycle events without sys...

CVE-2026-53816

OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

威胁情报2026-06-11 发布INFO

Oracle mitigates PeopleSoft zero-day exploited in data theft attacks

CVE-2026-35273

Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthe

历史摘要 · 未重新核验 · BleepingComputer

#cybersecurity #news #ransomware

安全公告2026-06-13 发布INFO

Compatibility Test Suite (CTS)

Android兼容性测试套件（CTS）是Google为Android设备提供的一套自动化测试工具，用于验证设备是否符合Android兼容性定义文档（CDD）的要求。CTS涵盖多项测试，包括安全模块、权限管理、加密功能、应用沙盒等，确保设备正