2026-07-08 归档

今日共收录 1050 条安全情报,包含 282 个 CVE,378 篇安全通告,以及 103 篇研究论文。

← 返回归档列表
安全公告2026-07-08 发布INFO

网站安全防护知道创宇十年web安全防护经验,多层安全防护体系结合独有的云端大数据和安全CDN加速,能对黑客恶意发起的诸如DDOS攻击、DNS攻击、CC攻击高效识别和拦截,有效防护您的网站安全不被黑客攻击。

该输入不是漏洞安全公告,而是知道创宇(Seebug)对其网站安全防护服务的商业宣传材料。内容强调其基于十年Web安全防护经验,构建多层安全防护体系,结合云端大数据与安全CDN加速,能够高效识别和拦截DDOS攻击、DNS攻击、CC攻击等黑客攻

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-07-08 发布INFO

京公网安备 11000002002063号

输入内容并非安全公告,而是网站备案信息,无法生成漏洞摘要。

历史摘要 · 未重新核验 · 360CERT

安全公告2026-07-08 发布INFO

(总)网出证(京)字第281号

此条公告为360CERT发布的网站许可证信息((总)网出证(京)字第281号),并非安全漏洞或威胁情报公告。内容涉及ICP备案或许可资质,与网络安全防御、漏洞修复无关。因此无法提取任何漏洞细节、受影响资产或攻击向量。

历史摘要 · 未重新核验 · 360CERT

安全公告2026-07-08 发布INFO

京网文〔2020〕6051-1195号

输入内容为版权声明(京网文〔2020〕6051-1195号),并非安全公告,无漏洞信息或技术细节可总结。

历史摘要 · 未重新核验 · 360CERT

安全公告2026-07-08 发布INFO

京ICP证080047号[京ICP备08010314号-6]

该公告为360CERT发布的关于京ICP证080047号[京ICP备08010314号-6]的ICP备案信息,内容仅涉及网站备案号,不包含任何安全漏洞或威胁情报。公告来源为工信部备案查询系统(beian.miit.gov.cn),属于合规性

历史摘要 · 未重新核验 · 360CERT

漏洞预警2026-07-07 发布INFO

mem0 contains unauthenticated config API endpoints that expose LLM API keys in plaintext and allow server-side request forgery via attacker-controlled ollama_base_url parameter....

CVE-2026-59706

mem0 contains unauthenticated config API endpoints that expose LLM API keys in plaintext and allow server-side request f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3, `azureidentity....

CVE-2026-46354

Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication for critical function vulnerability allows a remote, unauthentica...

CVE-2026-13019

Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication for crit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ...

CVE-2026-53483

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ...

CVE-2026-53481

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify...

CVE-2011-10043

Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a D...

CVE-2026-33264

A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths whe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

The DoLeads Integrator WordPress plugin through 0.65, wp2epub WordPress plugin through 0.65 have been seen to be used to achieve RCE, once they are added adding to a blog, for e...

CVE-2026-4375

The DoLeads Integrator WordPress plugin through 0.65, wp2epub WordPress plugin through 0.65 have been seen to be used to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including,...

CVE-2026-14345

The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

The uncanny-automator-pro WordPress plugin before 7.3.0.6 was distributed with malicious code after the vendor's uncanny-automator-pro WordPress plugin before 7.3.0.6 update/dis...

CVE-2026-12375

The uncanny-automator-pro WordPress plugin before 7.3.0.6 was distributed with malicious code after the vendor's uncanny

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, terminal websocket bootstrap routes only check authe...

CVE-2026-34048

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, terminal WebSocket bootstrap routes did not enforce ...

CVE-2026-34047

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, the cloneTo() Livewire action in ResourceOperations....

CVE-2026-34037

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-06 发布INFO

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into Chr...

CVE-2026-57572

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-06 发布INFO

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded file, the destination filename was taken from attacker-influ...

CVE-2026-57571

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded fil

历史摘要 · 未重新核验 · NVD