A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Acce...

CVE-2026-9800

A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorizati

历史摘要 · 未重新核验 · NVD

A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access (UMA) permission ticket for one resource can exploit this by using a spe...

CVE-2026-9799

A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access (UMA) permissio

历史摘要 · 未重新核验 · NVD

A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registration Access Token (RAT), could exploit this vulnerability t...

CVE-2026-9705

A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registrati

历史摘要 · 未重新核验 · NVD

A flaw was found in Keycloak. A missing authorization check in the GroupResource.addChild() endpoint within the Admin REST API allows an authenticated user with limited administ...

CVE-2026-9099

A flaw was found in Keycloak. A missing authorization check in the GroupResource.addChild() endpoint within the Admin RE

历史摘要 · 未重新核验 · NVD

A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with `manage-client` permission or access to client registration endpoints, co...

CVE-2026-9086

A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with `manage-client`

历史摘要 · 未重新核验 · NVD

A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore paramete...

CVE-2026-9083

A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submi

历史摘要 · 未重新核验 · NVD

Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive (.tgz), its custom tar unpacker reads each entry with io.ReadAll(tr) and no size limit. An at...

CVE-2026-54448

Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive (.tgz), its custom tar unpacker read

历史摘要 · 未重新核验 · NVD

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the DELETE /api/messages/:conversationId/:messageId endpoint allows any authentic...

CVE-2026-54029

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the DELETE /api/messages

历史摘要 · 未重新核验 · NVD

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the POST /api/files/images endpoint allows any authenticated user to upload files...

CVE-2026-54027

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the POST /api/files/imag

历史摘要 · 未重新核验 · NVD

决赛直播｜第四届阿里CTF安全挑战赛

本文是第四届阿里CTF安全挑战赛决赛直播的新闻通知。比赛由阿里云安全团队主办，旨在通过实战化场景提升参赛者的安全攻防技能。文章介绍了直播时间、观看方式及比赛亮点，包括Web安全、逆向工程、密码学等赛题方向。该比赛属于社区安全技术交流活动，不

历史摘要 · 未重新核验 · 先知社区

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

该信息为阿里云2027届实习生招聘公告，发布于先知社区，内容主要涉及网络安全团队的人才招聘，不包含任何威胁情报相关技术细节、漏洞信息、攻击活动或防御建议。文章宣传了加入安全团队的机会，未提及任何实际安全事件、漏洞利用、恶意软件或攻击组织。

历史摘要 · 未重新核验 · 先知社区

OpenClaw安全使用实践指南

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

关于OpenClaw安全应用的风险提示

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT

关于“独狼”团伙大规模传播恶意程序的风险提示

关于“独狼”团伙大规模传播恶意程序的风险提示

历史摘要 · 未重新核验 · CNCERT

关于RCtea僵尸网络大范围传播的风险提示

关于RCtea僵尸网络大范围传播的风险提示

历史摘要 · 未重新核验 · CNCERT

关于“黑猫”团伙利用搜索引擎传播仿冒Notepad++下载远...

关于“黑猫”团伙利用搜索引擎传播仿冒Notepad++下载远...

历史摘要 · 未重新核验 · CNCERT

关于NutsBot新型僵尸网络利用React2Shell漏洞...

关于NutsBot新型僵尸网络利用React2Shell漏洞...

历史摘要 · 未重新核验 · CNCERT

关于“黑猫”团伙利用搜索引擎传播捆绑远控木马的知名应用程序安...

关于“黑猫”团伙利用搜索引擎传播捆绑远控木马的知名应用程序安...

历史摘要 · 未重新核验 · CNCERT

关于BlackMoon变种HTTPBot僵尸网络的风险提示

关于BlackMoon变种HTTPBot僵尸网络的风险提示

历史摘要 · 未重新核验 · CNCERT

关于“游蛇”黑产攻击活动的风险提示

关于“游蛇”黑产攻击活动的风险提示

历史摘要 · 未重新核验 · CNCERT