2026-07-25 归档

今日共收录 771 条安全情报,包含 0 个 CVE,408 篇安全通告,以及 82 篇研究论文。

← 返回归档列表
安全公告2026-07-25 发布INFO

(总)网出证(京)字第281号

该公告为360CERT发布的网络出版服务许可证信息,编号为“(总)网出证(京)字第281号”,属于合规性声明,不涉及具体安全漏洞或威胁情报。

历史摘要 · 未重新核验 · 360CERT

安全公告2026-07-25 发布INFO

京网文〔2020〕6051-1195号

该输入并非有效的安全公告或漏洞信息。标题“京网文〔2020〕6051-1195号”为版权声明,来源360CERT,但正文为空,且未包含任何CVE、产品、严重性等关键信息。因此无法生成有意义的漏洞摘要或分析。

历史摘要 · 未重新核验 · 360CERT

安全公告2026-07-25 发布INFO

京ICP证080047号[京ICP备08010314号-6]

该条信息并非网络安全漏洞公告,而是网站备案信息。标题为“京ICP证080047号[京ICP备08010314号-6]”,来源为360CERT,但实际链接指向工信部备案查询网站。正文无内容,无CVE编号,无相关产品或严重性评级。该内容可能与安

历史摘要 · 未重新核验 · 360CERT

威胁情报2026-07-25 发布INFO

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-07-25 发布INFO

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

历史摘要 · 未重新核验 · CNCERT

安全公告2026-07-25 发布INFO

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the...

CVE-2026-66374

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) rece

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-25 发布INFO

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,...

CVE-2026-66373

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code executio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-25 发布INFO

A flaw was found in libsoup. An unsigned integer underflow in the...

CVE-2026-66337

A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream_read_until() function causes

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-25 发布INFO

A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup...

CVE-2026-66339

A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-25 发布INFO

Weintek cMT3092X HMI stores user account passwords in plaintext.

CVE-2026-61886

Weintek cMT3092X HMI stores user account passwords in plaintext.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-25 发布INFO

Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.

CVE-2026-61892

Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-25 发布INFO

A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing...

CVE-2026-66338

A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes tha

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-25 发布INFO

An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit...

CVE-2026-16280

An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-25 发布INFO

The web management interface in  Tycon Systems TPDIN-Monitor-WEB2 stores and displays system...

CVE-2026-55985

The web management interface in  Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-25 发布INFO

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.

CVE-2026-60134

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-25 发布INFO

An attacker can modify data that should be restricted to read‑only access.

CVE-2026-60135

An attacker can modify data that should be restricted to read‑only access.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

CVE-2026-16756

## Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash

CVE-2026-14257

### Summary `expand()` bounds the *number* of results it produces (the `max` option, `100_000` by default) but not thei

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

swift-nio-http2: Missing CR/LF/NUL validation in header values

CVE-2026-64785

## Summary SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster...

CVE-2026-17107

A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes

历史摘要 · 未重新核验 · GitHub Advisory