Grav before 2.0.4 ships a default .htaccess (and reference webserver-configs/htaccess.txt) whose rules blocking access to sensitive file types (.yaml, .php, .json, etc.) lack th...

CVE-2026-62230

Grav CMS 在 2.0.4 版本之前，默认提供的 .htaccess 文件（以及参考文件 webserver-configs/htaccess.txt）中用于阻止对敏感文件类型（如 .yaml、.php、.json 等）访问的规则缺少

历史摘要 · 未重新核验 · NVD

OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that allows lower-trust callers to execute actions beyond intended author...

CVE-2026-62229

OpenClaw 2026.5.18之前版本存在授权绕过漏洞，位于exec允许列表的全局匹配机制中。该漏洞允许低信任度的调用者通过构造特殊输入路径，绕过允许列表的全局模式检查，从而执行或持久化超出其授权范围的操作。攻击者无需用户交互（UI:

历史摘要 · 未重新核验 · NVD

OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that fail to validate post-navigation destinations. Attackers ...

CVE-2026-62227

OpenClaw 2026.4.14 至 2026.5.26 之前的版本存在服务器端请求伪造（SSRF）漏洞，位于浏览器快照路由中。该路由未能正确验证导航后的目标地址，导致低权限攻击者可以绕过 OpenClaw 的策略检查，访问本应被阻止的

历史摘要 · 未重新核验 · NVD

OpenClaw versions before 2026.5.18 contain an authorization bypass vulnerability in skill command dispatch that allows lower-trust callers to execute or persist actions beyond t...

CVE-2026-62225

OpenClaw 在 2026.5.18 之前的版本中存在授权绕过漏洞，位于技能命令调度模块。该漏洞允许低信任度的调用者通过配置的输入路径绕过工具策略限制，执行或持久化超出其授权范围的操作。攻击者需要具备网络访问能力（AV:N），攻击复杂度

历史摘要 · 未重新核验 · NVD

OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature that allows lower-trust callers to execute actions beyond their inten...

CVE-2026-62223

CVE-2026-62223 是 OpenClaw 软件（版本早于 2026.5.18）中一个严重的授权绕过漏洞。该漏洞存在于设备配对审批功能中，由于对调用者信任级别验证不严，较低信任级别的调用者可以绕过授权检查，执行超出其预期权限的操作。

历史摘要 · 未重新核验 · NVD

OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers with lower-trust caller access or control...

CVE-2026-62222

CVE-2026-62222 是 OpenClaw 项目（版本低于 2026.5.22）中存在的一个高严重性漏洞。漏洞源于 setup-mode discovery 功能在加载工作区插件时，未能充分验证插件的来源和完整性，导致攻击者可以加载

历史摘要 · 未重新核验 · NVD

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

历史摘要 · 未重新核验 · CrowdStrike

Cloud ManagerManage your cloud computing services

Cloud ManagerManage your cloud computing services

历史摘要 · 未重新核验 · Akamai Security Research

See all Cloud Computing

See all Cloud Computing

历史摘要 · 未重新核验 · Akamai Security Research

智利银行在勒索软件攻击后关闭所有分行

智利银行在勒索软件攻击后关闭所有分行

历史摘要 · 未重新核验 · CNCERT

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

历史摘要 · 未重新核验 · CrowdStrike

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

历史摘要 · 未重新核验 · CrowdStrike

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

历史摘要 · 未重新核验 · CrowdStrike

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

历史摘要 · 未重新核验 · CrowdStrike

CrowdStrike Services and Agentic MDR Put the Agentic SOC in Reach

CrowdStrike Services and Agentic MDR Put the Agentic SOC in Reach

历史摘要 · 未重新核验 · CrowdStrike

Threat Hunting & Intel

Threat Hunting & Intel

历史摘要 · 未重新核验 · CrowdStrike

Endpoint Security & XDR

Endpoint Security & XDR

历史摘要 · 未重新核验 · CrowdStrike

Engineering & Tech

Engineering & Tech

历史摘要 · 未重新核验 · CrowdStrike

EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware

EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware

历史摘要 · 未重新核验 · CrowdStrike

Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS

Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS

历史摘要 · 未重新核验 · CrowdStrike