2026-07-10 归档

今日共收录 1398 条安全情报,包含 466 个 CVE,522 篇安全通告,以及 115 篇研究论文。

← 返回归档列表
安全公告2026-07-09 发布INFO

YesWiki Vulnerable to Reflected XSS via Unescaped Archived-Revision `time` Parameter in `handlers/page/show.php`

CVE-2026-52773

### Summary YesWiki's archived-revision view reflects the `time` `GET` parameter into a hidden HTML input in `handlers/p

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

YesWiki has Unauthenticated Server-Side Request Forgery via ActivityPub `Signature.keyId`

CVE-2026-52769

## Summary The `POST /api/forms/{formId}/actor/inbox` route - exposed publicly with `acl:"public"` - accepts an HTTP `Si

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

YesWiki vulnerable to unauthenticated arbitrary page deletion via `{{erasespamedcomments}}` action

CVE-2026-52766

### Summary The `{{erasespamedcomments}}` wiki action (`actions/EraseSpamedCommentsAction.php`) accepts a `suppr[]` arr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

Avo: Direct attachment upload endpoint lacks upload authorization and bypasses field-level upload policy

CVE-2026-53769

### Summary Avo's direct attachment upload endpoint lacks server-side upload authorization and bypasses the documented

历史摘要 · 未重新核验 · GitHub Advisory

威胁情报2026-07-10 发布INFO

Firewall for AI

Firewall for AI

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-07-09 发布INFO

Microsoft to retire the OWA Light client in Exchange Server

Microsoft has announced plans to disable Outlook Web Access (OWA) Light, the lightweight version of the Outlook Web App

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-09 发布INFO

UK Government Rolls Out Agentic AI Defense Plan Alongside Industry Pledge

Two announcements on July 7, 2026, demonstrate the government’s determination to improve the level of cybersecurity with

历史摘要 · 未重新核验 · SecurityWeek

安全公告2026-07-10 发布INFO

Firefox browsers

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-07-10 发布INFO

Sign in to Cloud

Sign in to Cloud

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-07-10 发布INFO

Sign Up for Free Cloud Tier

Sign Up for Free Cloud Tier

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-07-10 发布INFO

iOS 26.4.2 and iPadOS 26.4.2

iOS 26.4.2 and iPadOS 26.4.2

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-07-10 发布INFO

iOS 18.7.8 and iPadOS 18.7.8

iOS 18.7.8 and iPadOS 18.7.8

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-07-10 发布INFO

iOS 18.7.7 and iPadOS 18.7.7

iOS 18.7.7 and iPadOS 18.7.7

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-07-10 发布INFO

iOS 26.4 and iPadOS 26.4

iOS 26.4 and iPadOS 26.4

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-07-10 发布INFO

Background Security Improvements for iOS, iPadOS, and macOS

Background Security Improvements for iOS, iPadOS, and macOS

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-07-10 发布INFO

iOS 16.7.15 and iPadOS 16.7.15

iOS 16.7.15 and iPadOS 16.7.15

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-07-10 发布INFO

iOS 15.8.7 and iPadOS 15.8.7

iOS 15.8.7 and iPadOS 15.8.7

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-07-10 发布INFO

iOS 26.3 and iPadOS 26.3

iOS 26.3 and iPadOS 26.3

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-07-10 发布INFO

iOS 18.7.5 and iPadOS 18.7.5

iOS 18.7.5 and iPadOS 18.7.5

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-07-10 发布INFO

iOS 26.2 and iPadOS 26.2

iOS 26.2 and iPadOS 26.2

历史摘要 · 未重新核验 · Apple Security Releases