2026-07-05 归档

今日共收录 754 条安全情报，包含 65 个 CVE，375 篇安全通告，以及 61 篇研究论文。

← 返回归档列表

漏洞预警2026-07-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use As per the GHCB spec, when using GHCB v2+ requ...

CVE-2026-53360

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2+

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shad...

CVE-2026-53359

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to u

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-04 发布INFO

A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. The impacted element is the function AIAgent.run_conversation of the file run_agent.py of the compon...

CVE-2026-14626

A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. The impacted element is the function AIAgen

历史摘要 · 未重新核验 · NVD

#cve #cwe-404

漏洞预警2026-07-04 发布INFO

HestiaCP panel cronjob feature is affected by a broken access control vulnerability. Low privilege users can modify the panel cronjob to execute scripts HestiaCP management scri...

CVE-2026-12196

HestiaCP panel cronjob feature is affected by a broken access control vulnerability. Low privilege users can modify the

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-07-04 发布INFO

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the v_ftp_user parameter when deleti...

CVE-2026-12195

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary c

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-04 发布INFO

A vulnerability was identified in omec-project amf up to 2.0.2/2.1.1. Impacted is an unknown function of the file /go/src/amf/ngap/handler.go of the component NGSetupRequest Han...

CVE-2026-14624

A vulnerability was identified in omec-project amf up to 2.0.2/2.1.1. Impacted is an unknown function of the file /go/sr

历史摘要 · 未重新核验 · NVD

#cve #cwe-404

漏洞预警2026-07-04 发布INFO

A vulnerability was determined in omec-project amf up to 2.1.1. This issue affects the function RRCInactiveTransitionReport of the component NGAP Message Handler. Executing a ma...

CVE-2026-14623

A vulnerability was determined in omec-project amf up to 2.1.1. This issue affects the function RRCInactiveTransitionRep

历史摘要 · 未重新核验 · NVD

#cve #cwe-404

漏洞预警2026-07-04 发布INFO

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/...

CVE-2026-14622

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. Th

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-07-04 发布INFO

A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.initEggroll of the file java/osx/osx-broker/src/main/java/or...

CVE-2026-14621

A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.ini

历史摘要 · 未重新核验 · NVD

#cve #cwe-488

漏洞预警2026-07-04 发布INFO

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /medicine.php. This manipulation of the ar...

CVE-2026-14619

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionali

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-07-04 发布INFO

PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's fi...

CVE-2026-12194

PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to e

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-07-04 发布INFO

A vulnerability was detected in Open5GS up to 2.7.7. Affected by this vulnerability is the function amf_nnrf_handle_nf_discover of the file src/amf/nnrf-handler.c of the compone...

CVE-2026-14618

A vulnerability was detected in Open5GS up to 2.7.7. Affected by this vulnerability is the function amf_nnrf_handle_nf_d

历史摘要 · 未重新核验 · NVD

#cve #cwe-404

漏洞预警2026-07-03 发布INFO

In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buff...

CVE-2026-14355

In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algo

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

威胁情报2026-07-05 发布INFO

决赛直播｜第四届阿里CTF安全挑战赛

该文章宣布第四届阿里CTF安全挑战赛决赛将于2026年7月5日举行，并提供了直播链接。阿里CTF是由阿里巴巴集团主办的安全技术竞赛，旨在挖掘和培养网络安全人才，推动安全技术交流。决赛中选手将面对实战化的安全挑战，涵盖逆向工程、漏洞利用、密码

历史摘要 · 未重新核验 · 先知社区

#research #community #xianzhi

威胁情报2026-07-05 发布INFO

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

该文章为阿里云2027届实习生招聘信息，发布于先知社区，面向安全领域的在校生，旨在招募AI时代顶尖安全团队人才。内容不涉及任何网络安全威胁、漏洞或攻击活动，仅属于技术社区招聘公告。

历史摘要 · 未重新核验 · 先知社区

#research #community #xianzhi

威胁情报2026-07-05 发布INFO

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #botnet #ddos

威胁情报2026-07-05 发布INFO

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #botnet #ddos

威胁情报2026-07-05 发布INFO

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #botnet #ddos

威胁情报2026-07-05 发布INFO

从 Web 到小程序：用 AI-First 思维重构逆向调试工具

历史摘要 · 未重新核验 · 看雪

#kanxue #community #reversing

威胁情报2026-07-05 发布INFO

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

#cncert #government #report