RuoYi-Vue-Plus through 5.6.2, fixed in commit 88d03d9, exposes workflow task management endpoints under /workflow/task (FlwTaskController) without any permission check: the cont...

CVE-2026-58176

RuoYi-Vue-Plus through 5.6.2, fixed in commit 88d03d9, exposes workflow task management endpoints under /workflow/task (

历史摘要 · 未重新核验 · NVD

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /...

CVE-2026-58174

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but construct

历史摘要 · 未重新核验 · NVD

Vibe-Trading before 0.1.10 contains a path traversal vulnerability that allows attackers to write files outside the intended memory root directory by supplying a malicious memor...

CVE-2026-58173

Vibe-Trading before 0.1.10 contains a path traversal vulnerability that allows attackers to write files outside the inte

历史摘要 · 未重新核验 · NVD

Vibe-Trading before 0.1.10 constructs the swarm run directory by joining a caller-supplied run identifier onto the runs base directory without validation in run_dir (agent/src/s...

CVE-2026-58171

Vibe-Trading before 0.1.10 constructs the swarm run directory by joining a caller-supplied run identifier onto the runs

历史摘要 · 未重新核验 · NVD

Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the broker proposals directory without sanitization (agent/src/liv...

CVE-2026-58170

Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the broke

历史摘要 · 未重新核验 · NVD

Vibe-Trading before 0.1.10 contains a DNS rebinding authentication bypass vulnerability that allows remote attackers to bypass bearer-token authentication by exploiting the serv...

CVE-2026-58169

Vibe-Trading before 0.1.10 contains a DNS rebinding authentication bypass vulnerability that allows remote attackers to

历史摘要 · 未重新核验 · NVD

OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that allows authenticated non-admin identities with fine-grained enrollment manage...

CVE-2026-58165

OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that allows authenticated

历史摘要 · 未重新核验 · NVD

The asynchronous SNTP client in Zephyr (subsys/net/lib/sntp/sntp.c, sntp_close_async) closed the UDP socket file descriptor directly from the calling thread immediately after de...

CVE-2026-10655

The asynchronous SNTP client in Zephyr (subsys/net/lib/sntp/sntp.c, sntp_close_async) closed the UDP socket file descrip

历史摘要 · 未重新核验 · NVD

The Zephyr net_buf library (lib/net_buf/buf.c) manipulated both of its reference counts -- the per-header buf->ref and the per-data-block ref_count at the start of each variable...

CVE-2026-10653

The Zephyr net_buf library (lib/net_buf/buf.c) manipulated both of its reference counts -- the per-header buf->ref and t

历史摘要 · 未重新核验 · NVD

Zephyr's DNS resolver (subsys/net/lib/dns) parses resource records from DNS responses in dns_unpack_answer(), which validated only the fixed RR header (type, class, TTL, rdlengt...

CVE-2026-10652

Zephyr's DNS resolver (subsys/net/lib/dns) parses resource records from DNS responses in dns_unpack_answer(), which vali

历史摘要 · 未重新核验 · NVD

Digital signature schemes based on code equivalence and syndrome decoding from restricted errors

本文介绍两种基于纠错码的数字签名方案：CROSS（Codes and Restricted Objects Signature Scheme）和LESS（Linear Equivalence Signature Scheme），它们是美国国

历史摘要 · 未重新核验 · arXiv cs.CR

决赛直播｜第四届阿里CTF安全挑战赛

本文是一篇关于第四届阿里CTF（网络安全技术挑战赛）决赛的直播通知，发布于阿里云先知社区。文章介绍了决赛将于2026年7月2日举行，并提供了直播链接，旨在吸引安全爱好者参与或观看比赛。阿里CTF是阿里巴巴集团主办的知名网络安全竞赛，主要面向

历史摘要 · 未重新核验 · 先知社区

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

本文是阿里云在先知社区发布的2027届实习生招聘公告，主要面向AI时代的安全领域。招聘对象为2027届毕业生，岗位涉及云安全、AI安全等方向。文章强调了阿里云在安全领域的投入和团队实力，但未涉及任何具体漏洞、攻击活动或威胁情报内容。

历史摘要 · 未重新核验 · 先知社区

Control CenterManage your security and delivery services

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

See all Cybersecurity

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

Our Infrastructure

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

OpenClaw安全使用实践指南

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

关于OpenClaw安全应用的风险提示

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT

关于“独狼”团伙大规模传播恶意程序的风险提示

关于“独狼”团伙大规模传播恶意程序的风险提示

历史摘要 · 未重新核验 · CNCERT

关于RCtea僵尸网络大范围传播的风险提示

关于RCtea僵尸网络大范围传播的风险提示

历史摘要 · 未重新核验 · CNCERT