ARVO: Atlas of Reproducible Vulnerabilities for Open-Source Software
该论文针对开源软件漏洞数据集中长期存在的“可重复性、数量、多样性三难困境”问题，提出了一种新的方法，旨在在不牺牲数量和多样性的前提下，大规模实现漏洞的可重复性。作者通过分析现有大规模漏洞复现的主要障碍，并设计通用解决方案，成功将可重复性引入
2026-06-19 归档
今日共收录 997 条安全情报，包含 210 个 CVE，375 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a deni...
CVE-2026-8806
Mitsubishi Electric MELSEC iQ-F系列FX5-ENET/IP以太网模块（所有版本）存在预期行为违反漏洞。远程攻击者可通过在短时间内持续向设备以太网端口发送大量通信数据包，显著增加设备处理负载，从而阻止内部异常检测
The User Admin Simplifier plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0. This is due to missing or incorrect nonce...
CVE-2026-11775
该漏洞存在于WordPress的User Admin Simplifier插件中，影响所有版本至3.0.0（含）。由于对useradminsimplifier_options_page函数缺少或错误的nonce验证，导致跨站请求伪造（CSR
An attacker within BLE communication range can monopolize the device's only available BLE connection slot, preventing legitimate users or applications from establishing a conn...
CVE-2026-52866
CVE-2026-52866 是一个影响通过 BLE（蓝牙低功耗）通信的设备的漏洞。该漏洞允许攻击者在 BLE 通信范围内，通过独占设备唯一可用的 BLE 连接槽，阻止合法用户或应用程序建立连接。这会导致设备无法被正常配对或使用，从而引发拒
HTML injection in pgAdmin 4's cloud deployment module. The verify_credentials, deploy, regions, and update-server endpoints under /rds/, /azure/, /google/, and the top-level /cl...
CVE-2026-12047
CVE-2026-12047 是 pgAdmin 4 云部署模块中的一个 HTML 注入漏洞。该漏洞源于多个端点（如 /rds/verify_credentials、/azure/check_cluster_name_availabilit
PraisonAI before 1.5.128 contains a cross-origin agent execution vulnerability in the AGUI endpoint that allows remote attackers to trigger arbitrary agent execution. The POST /...
CVE-2026-56076
PraisonAI 1.5.128 之前版本存在一个跨源代理执行漏洞。该漏洞位于 /agui 端点，允许远程攻击者触发任意代理执行。具体来说，POST /agui 端点缺乏身份验证，并硬编码了 Access-Control-Allow-Or
PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts. Att...
CVE-2026-56074
PraisonAI 是一个人工智能辅助工具平台，其 1.5.128 版本之前存在一个严重的安全逻辑缺陷：工具批准决策仅根据工具名称缓存，而不检查调用参数。这意味着用户第一次批准某个工具（例如执行'ls'命令）后，后续任何与该工具同名的调用（
京公网安备 11000002002063号
本次情报输入内容为公安备案号'京公网安备 11000002002063号'，来源标记为360CERT安全报告，但实际链接指向公安备案查询页面，且正文摘要为空。发布时间为2026年6月19日（未来时间），标签包含'360','apt','re
（总）网出证（京）字第281号
本次输入来源为360CERT安全报告，但提供的URL（https://www.360.cn/licence2.html）为360公司的许可证页面，并非安全报告内容。标题“（总）网出证（京）字第281号”无明确安全情报含义。文章摘要为空，且无
京网文〔2020〕6051-1195号
输入内容为360CERT安全报告，标题为“京网文〔2020〕6051-1195号”，该标题通常是网络文化经营许可证编号，并非威胁情报文章。来源URL为360.cn的许可证页面，无正文摘要，无CVE信息，标签仅包含360、apt、report
京ICP证080047号[京ICP备08010314号-6]
该输入内容为空或无效，标题为‘京ICP证080047号[京ICP备08010314号-6]’，来源标注为360CERT安全报告，但来源URL指向工信部备案查询网站，且发布时间为未来时间（2026-06-19），无法获取有效威胁情报信息。无任
CrowdStrike Falcon Platform Achieves 441% ROI in Three Years
CrowdStrike Falcon Platform Achieves 441% ROI in Three Years
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Cloud ManagerManage your cloud computing services
Cloud ManagerManage your cloud computing services
See all Cloud Computing
See all Cloud Computing
智利银行在勒索软件攻击后关闭所有分行
智利银行在勒索软件攻击后关闭所有分行
Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019
Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019
Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019
Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019
Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018
Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018
How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem
How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem