2026-07-22 归档

今日共收录 2277 条安全情报,包含 1464 个 CVE,419 篇安全通告,以及 96 篇研究论文。

← 返回归档列表
漏洞预警2026-07-20 发布INFO

Mailpit is an email testing tool and API for developers. Prior to version 1.30.1, the fix for GHSA-fpxj-m5q8-fphw (CVE-2026-45710, "Mailpit: Set a default 50MB p/m limit to prev...

CVE-2026-48824

Mailpit is an email testing tool and API for developers. Prior to version 1.30.1, the fix for GHSA-fpxj-m5q8-fphw (CVE-2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

lettre is a a mailer library for Rust. Starting in version 0.10.1 and prior to version 0.11.22, an inverted-boolean bug in lettre's `boring-tls` integration silently disables TL...

CVE-2026-46428

lettre is a a mailer library for Rust. Starting in version 0.10.1 and prior to version 0.11.22, an inverted-boolean bug

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the Mailpit SMTP server has a Server.MaxSize int field that controls the maximum allowed DATA p...

CVE-2026-45713

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the Mailpit SMTP server has a Server.M

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the screenshot/print proxy (/proxy?data=…) maintains a package-level assets map[string]MessageA...

CVE-2026-45712

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the screenshot/print proxy (/proxy?dat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the mailpit dump --http <base-url> <out-dir> sub-command downloads every message from a remote ...

CVE-2026-45711

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the mailpit dump --http sub-command

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

Mailpit is an email testing tool and API for developers. The fix for GHSA-6jxm-fv7w-rw5j (CVE-2026-23845, "Server-Side Request Forgery (SSRF) via HTML Check API"), shipped in ma...

CVE-2026-45709

Mailpit is an email testing tool and API for developers. The fix for GHSA-6jxm-fv7w-rw5j (CVE-2026-23845, "Server-Side R

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and fram...

CVE-2026-32822

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and fram...

CVE-2026-32807

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API (DAPI) handling allo...

CVE-2026-28220

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the s...

CVE-2026-27823

A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an auth

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.

CVE-2026-26081

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.

CVE-2026-26080

HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAPro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative o...

CVE-2026-21824

HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user perso

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

Client-Side Enforcement of Server-Side Security vulnerability in Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co. Corporate Training Management System all...

CVE-2026-13724

Client-Side Enforcement of Server-Side Security vulnerability in Gobito Informatics Technologies Engineering Industry an

历史摘要 · 未重新核验 · NVD

威胁情报2026-07-22 发布INFO

决赛直播|第四届阿里CTF安全挑战赛

本文是第四届阿里CTF安全挑战赛决赛直播的公告,由阿里云·先知社区发布。比赛聚焦于网络安全攻防技术,旨在提升参赛者的实战能力。文章本身不包含任何具体的威胁情报、漏洞信息或攻击活动描述,仅作为赛事宣传和直播入口。

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-07-22 发布INFO

抢先加入AI时代顶尖安全团队!阿里云2027届实习生招聘来了!

该文章为阿里云安全团队2027届实习生招聘公告,发布于先知社区。内容主要面向安全领域在校生,介绍阿里云安全团队的实习岗位、招聘流程及福利待遇,未涉及任何网络安全威胁、漏洞或攻击事件。文章属于社区交流与人才招募性质,不包含技术细节或情报价值。

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-07-22 发布INFO

Control CenterManage your security and delivery services

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-07-22 发布INFO

See all Cybersecurity

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-07-22 发布INFO

Our Infrastructure

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-07-22 发布INFO

OpenClaw安全使用实践指南

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT