The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web...

CVE-2026-43663

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.

历史摘要 · 未重新核验 · NVD

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web...

CVE-2026-39872

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.

历史摘要 · 未重新核验 · NVD

Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a remote attacker to escalate privileges via the IdentityServer account profile end...

CVE-2026-31016

Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a remote attacker to escal

历史摘要 · 未重新核验 · NVD

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing mal...

CVE-2026-28979

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.

历史摘要 · 未重新核验 · NVD

CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. The minify function has a memory leak when processing a document c...

CVE-2026-13593

CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. The minif

历史摘要 · 未重新核验 · NVD

luci-app-tailscale-community contains a command injection vulnerability in the tailscale.do_login RPC method that allows authenticated users to execute arbitrary commands as roo...

CVE-2026-57999

luci-app-tailscale-community contains a command injection vulnerability in the tailscale.do_login RPC method that allows

历史摘要 · 未重新核验 · NVD

Elide through 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in SortingImpl.getValidSortingRules, allowing attackers to sort collections by forbidde...

CVE-2026-57954

Elide through 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in SortingImpl.getValidSorting

历史摘要 · 未重新核验 · NVD

Mythic before 3.4.0.60 contains an authorization bypass vulnerability that allows authenticated spectator-role users to perform unauthorized write operations by accessing the ev...

CVE-2026-57953

Mythic before 3.4.0.60 contains an authorization bypass vulnerability that allows authenticated spectator-role users to

历史摘要 · 未重新核验 · NVD

Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints (c2profile_config_check_webhook, c2profile_redirect_rules_webhook, c2profile_get_ioc...

CVE-2026-57952

Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints (c2profile_config_check_web

历史摘要 · 未重新核验 · NVD

Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload_build_step table with an always-satisfied _or condition that bypasses operation-scoped access co...

CVE-2026-57951

Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload_build_step table with an always-satisfi

历史摘要 · 未重新核验 · NVD

Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the pinpointJwt session cookie due to missing HttpOnly and S...

CVE-2026-57948

Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the

历史摘要 · 未重新核验 · NVD

Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns webhook tokens and basic-auth credentials in cleart...

CVE-2026-56783

Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that re

历史摘要 · 未重新核验 · NVD

Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.

CVE-2026-36848

Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.

历史摘要 · 未重新核验 · NVD

决赛直播｜第四届阿里CTF安全挑战赛

本文是第四届阿里CTF（网络安全技术竞赛）决赛直播活动的新闻报道，发布于阿里云先知社区。该竞赛面向全球安全爱好者，旨在通过实战化攻防对抗提升参赛者的安全技能。文章主要介绍了决赛直播的观看方式、赛程安排以及赛事背景，未涉及任何实际网络攻击活动

历史摘要 · 未重新核验 · 先知社区

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

这是一篇阿里云安全团队发布的2027届实习生招聘公告，旨在招募顶尖人才加入AI时代的安全团队。文章主要介绍招聘背景、岗位需求和申请方式，不涉及任何安全漏洞、攻击事件或威胁情报内容。

历史摘要 · 未重新核验 · 先知社区

[原创 附源码 Prompt！手把手教你用 AI 自动化还原 VMP 字节码（含实战案例）

[原创 附源码 Prompt！手把手教你用 AI 自动化还原 VMP 字节码（含实战案例）

历史摘要 · 未重新核验 · 看雪

Control CenterManage your security and delivery services

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

See all Cybersecurity

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

Our Infrastructure

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

OpenClaw安全使用实践指南

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT