2026-08-04 归档

今日共收录 1122 条安全情报，包含 327 个 CVE，410 篇安全通告，以及 104 篇研究论文。

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 2...

CVE-2026-59643

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affect

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue also affects Bouncy Castle for Java LTS before 2.73.12, ...

CVE-2026-59642

In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue

历史摘要 · 未重新核验 · NVD

#cve #cwe-354

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

CVE-2026-59641

In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This iss

历史摘要 · 未重新核验 · NVD

#cve #cwe-345

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, a...

CVE-2026-59640

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and...

CVE-2026-59639

In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue al

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle for Java LTS before...

CVE-2026-59638

In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in.

历史摘要 · 未重新核验 · NVD

#cve #cwe-297

漏洞预警2026-08-03 发布INFO

A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Min...

CVE-2026-18581

A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of th

历史摘要 · 未重新核验 · NVD

#cve #cwe-617

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bou...

CVE-2026-15055

In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also a

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

CVE-2026-12185

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This i

历史摘要 · 未重新核验 · NVD

#cve #cwe-789

漏洞预警2026-08-03 发布INFO

A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution.

CVE-2026-3245

A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution.

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-08-02 发布INFO

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

CVE-2026-18577

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions throu

历史摘要 · 未重新核验 · NVD

#cve #cwe-288

漏洞预警2026-08-02 发布INFO

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), t...

CVE-2026-10848

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-787

威胁情报2026-08-04 发布INFO

决赛直播｜第四届阿里CTF安全挑战赛

本文是先知社区发布的关于第四届阿里CTF安全挑战赛决赛直播的社区通知类文章，并非具体威胁情报或攻击事件分析。内容主要围绕比赛安排、直播时间与观看方式等赛事信息展开，未涉及任何漏洞利用、恶意软件、攻击组织或战术技术程序。文章中未提及CVE编号

历史摘要 · 未重新核验 · 先知社区

#research #community #xianzhi

威胁情报2026-08-04 发布INFO

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

本文是阿里云先知社区发布的2027届实习生招聘公告，标题为“抢先加入AI时代顶尖安全团队！”。内容属于人力资源招聘信息，面向2027届毕业生，意在招募安全相关岗位的实习生。由于原文未提供正文摘要，无法获知具体岗位要求、技术方向或招聘细节。该

历史摘要 · 未重新核验 · 先知社区

#research #community #xianzhi

威胁情报2026-08-04 发布INFO

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

#ddos #botnet #akamai

威胁情报2026-08-04 发布INFO

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

#ddos #botnet #akamai

威胁情报2026-08-04 发布INFO

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

#ddos #botnet #akamai

威胁情报2026-08-04 发布INFO

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

#report #cncert #government

威胁情报2026-08-04 发布INFO

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT

#report #cncert #government

威胁情报2026-08-04 发布INFO

关于“独狼”团伙大规模传播恶意程序的风险提示

历史摘要 · 未重新核验 · CNCERT

#report #cncert #government