2026-06-21 归档

今日共收录 748 条安全情报，包含 44 个 CVE，388 篇安全通告，以及 64 篇研究论文。

← 返回归档列表

漏洞预警2026-06-20 发布INFO

Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attacker can inje...

CVE-2025-71331

Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat

历史摘要 · 未重新核验 · NVD

#cve #cwe-80

漏洞预警2026-06-20 发布INFO

Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by m...

CVE-2026-12673

Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalati

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

漏洞预警2026-06-20 发布INFO

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted PO...

CVE-2020-37255

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-288

漏洞预警2026-06-20 发布INFO

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

CVE-2026-48939

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-20 发布INFO

SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated remote attacker to execute arbitrary code on th...

CVE-2026-48909

SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauth

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-06-20 发布INFO

A vulnerability in the SP Page Builder for Joomla allows the upload of arbitrary files for unauthenticated users, ultimately resulting in PHP code upload and execution.

CVE-2026-48908

A vulnerability in the SP Page Builder for Joomla allows the upload of arbitrary files for unauthenticated users, ultima

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-20 发布INFO

The Simple File List plugin for WordPress is vulnerable to unauthorized file operations due to a missing authorization check on the 'frontmanage' shortcode attribute in all vers...

CVE-2026-12119

The Simple File List plugin for WordPress is vulnerable to unauthorized file operations due to a missing authorization c

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-06-20 发布INFO

The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to insufficient authorization checks in all versions up to, and including, 6.3.7. This...

CVE-2026-11912

The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to insufficient authorization

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-06-20 发布INFO

The Simple File List plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the eeSFL_DeleteFile function in all versions up t...

CVE-2026-11911

The Simple File List plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validat

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-19 发布INFO

Joomla! Component J-BusinessDirectory 4.9.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious...

CVE-2019-25752

Joomla! Component J-BusinessDirectory 4.9.7 contains an SQL injection vulnerability that allows unauthenticated attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-19 发布INFO

Joomla J-CruisePortal 6.0.4 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the ...

CVE-2019-25749

Joomla J-CruisePortal 6.0.4 contains an SQL injection vulnerability that allows authenticated attackers to execute arbit

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

威胁情报2026-06-21 发布INFO

决赛直播｜第四届阿里CTF安全挑战赛

该输入为一条来自先知社区（阿里云安全社区）的公告，内容是关于第四届阿里CTF安全挑战赛的决赛直播通知。阿里CTF是由阿里巴巴举办的面向全球安全爱好者的网络安全竞赛，旨在通过实战题目提升参与者的攻防能力。本次决赛直播于2026年6月21日发布

历史摘要 · 未重新核验 · 先知社区

#community #research #xianzhi

威胁情报2026-06-21 发布INFO

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

本文是阿里云2027届实习生招聘公告，发布于先知社区。内容主要介绍招聘岗位、面向群体（2027届毕业生）、团队背景（AI时代顶尖安全团队）、招聘流程及福利待遇等。文章不涉及任何网络安全威胁、漏洞、攻击事件或恶意软件信息，纯属企业人才招募宣传

历史摘要 · 未重新核验 · 先知社区

#community #research #xianzhi

威胁情报2026-06-20 发布INFO

【AI自动逆向算法】Binary Analysis Agent：构建AI驱动的二进制分析系统

历史摘要 · 未重新核验 · 看雪

#reversing #kanxue #community

威胁情报2026-06-21 发布INFO

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

#ddos #botnet #akamai

威胁情报2026-06-21 发布INFO

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

#ddos #botnet #akamai

威胁情报2026-06-21 发布INFO

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

#ddos #botnet #akamai

威胁情报2026-06-21 发布INFO

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

#cncert #government #report

威胁情报2026-06-21 发布INFO

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT

#cncert #government #report

威胁情报2026-06-21 发布INFO

关于“独狼”团伙大规模传播恶意程序的风险提示

历史摘要 · 未重新核验 · CNCERT

#cncert #government #report