2026-07-01 归档

今日共收录 1573 条安全情报，包含 770 个 CVE，406 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-06-30 发布INFO

A race condition in the Zephyr Bluetooth Classic RFCOMM host stack (subsys/bluetooth/host/classic/rfcomm.c) mishandles a simultaneous bidirectional session disconnect. When the ...

CVE-2026-10654

A race condition in the Zephyr Bluetooth Classic RFCOMM host stack (subsys/bluetooth/host/classic/rfcomm.c) mishandles a

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-06-30 发布INFO

KTM System e-BOK is vulnerable to Cross‑Site Request Forgery (CSRF) in both the email-change and password-change functionalities. An attacker can craft a malicious website that,...

CVE-2026-35096

KTM System e-BOK is vulnerable to Cross‑Site Request Forgery (CSRF) in both the email-change and password-change functio

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-06-30 发布INFO

Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configur...

CVE-2026-8655

Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous be

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-06-30 发布INFO

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gatewa...

CVE-2026-8452

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Den

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-06-30 发布INFO

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

CVE-2026-8451

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetS

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-30 发布INFO

Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, C...

CVE-2026-13474

Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Prof

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-06-30 发布INFO

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual...

CVE-2026-10817

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-30 发布INFO

Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled

CVE-2026-10816

Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management I

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

漏洞预警2026-06-30 发布INFO

Net::BitTorrent versions through 2.0.1 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRNG. The MSE (Message Stream Encryption) handshake derives...

CVE-2026-57082

Net::BitTorrent versions through 2.0.1 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRN

历史摘要 · 未重新核验 · NVD

#cve #cwe-330 #cwe-338

漏洞预警2026-06-29 发布INFO

The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) used an incorrect boolean expression that combined the RFC 4...

CVE-2026-7656

The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) use

历史摘要 · 未重新核验 · NVD

#cve #cwe-290 #cwe-670

漏洞预警2026-06-29 发布INFO

luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerability in the generateKey ubus method where the cl_meta parameter is interpolated...

CVE-2026-58000

luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerability in the generateKe

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-29 发布INFO

Hi.Events through 1.9.0 public check-in list endpoints use short_id as sole access control, allowing unauthenticated access to retrieve full attendee lists including emails and ...

CVE-2026-57960

Hi.Events through 1.9.0 public check-in list endpoints use short_id as sole access control, allowing unauthenticated acc

历史摘要 · 未重新核验 · NVD

#cve #cwe-359

威胁情报2026-06-30 发布INFO

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

CVE-2026-33017

Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a

历史摘要 · 未重新核验 · The Hacker News

#cybersecurity #news #thn #conti

威胁情报2026-06-30 发布INFO

BlueHammer Vulnerability Exploited in Ransomware Attacks

CVE-2026-33825

The Microsoft Defender vulnerability CVE-2026-33825 was exploited in the wild as a zero-day before patches were released

历史摘要 · 未重新核验 · SecurityWeek

#news #enterprise #securityweek

安全公告2026-07-01 发布INFO

Compatibility Test Suite (CTS)

Android 兼容性测试套件（CTS）是 Google 提供的一套测试工具，用于验证 Android 设备是否符合 Android 兼容性定义文档（CDD）的要求。CTS 包含数万个测试用例，覆盖从内核、图形、相机到蓝牙、Wi-Fi 等各