安全日报 - 2026-06-20 - Cyber Security Daily Radar

安全公告2026-06-19 发布INFO

@tinacms/cli: Remote Code Execution in @tinacms/cli via Forestry migration — unsanitised __TINA_INTERNAL__ marker in user-controlled YAML labels

CVE-2026-54074

## Description ### Summary `@tinacms/cli` contains a Remote Code Execution vulnerability in its Forestry-to-Tina migra

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-94 #severity:high

安全公告2026-06-19 发布INFO

StarCitizenWiki Extension Embed Video: Stored XSS via unsanitized class passed to template

CVE-2026-55691

### Summary The user supplied class value is fed directly into the sprintf call that creates HTML. You can add a quote t

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-79 #cwe-80 #severity:high

安全公告2026-06-19 发布INFO

StarCitizenWiki Extension Embed Video: Stored XSS via unsanitized service name in exception text

CVE-2026-55690

### Summary When passing an unknown service name to embedvideo, an error message is rendered containing the invalid serv

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-79 #cwe-80 #severity:high

安全公告2026-06-19 发布INFO

flat-to-nested: Prototype pollution in flat-to-nested convert() via proto parent/id key

CVE-2026-55091

### Summary `convert()` builds the nested tree by using each flat record's `id` and `parent` field values directly as

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-915 #cwe-1321 #severity:high

威胁情报2026-06-20 发布INFO

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

#report #government #cncert

威胁情报2026-06-20 发布INFO

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

历史摘要 · 未重新核验 · CNCERT

#report #government #cncert

威胁情报2026-06-20 发布INFO

[原创]探索CVE-2026-31431的热补丁修复方案

CVE-2026-31431

[原创]探索CVE-2026-31431的热补丁修复方案

历史摘要 · 未重新核验 · 看雪

#reversing #kanxue #community

威胁情报2026-06-19 发布INFO

CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday urged Fortinet customers with FortiGate app

历史摘要 · 未重新核验 · The Hacker News

#thn #news #cybersecurity

安全公告2026-06-20 发布INFO

Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。

Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。

历史摘要 · 未重新核验 · Adobe Security Bulletins

#adobe #acrobat #reader

安全公告2026-06-20 发布INFO

Newsletter Subscription

历史摘要 · 未重新核验 · Adobe Security Bulletins

#adobe #acrobat #reader

2026-06-20 归档