2026-08-07 归档

今日共收录 1483 条安全情报，包含 647 个 CVE，430 篇安全通告，以及 120 篇研究论文。

← 返回归档列表

漏洞预警2026-08-05 发布INFO

Improper Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Any authenticated user can reject arbitrary pending edit-revisions with...

CVE-2026-50749

Improper Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Any authentica

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-08-05 发布INFO

A flaw was found in openshift/oauth-proxy. On paths configured to bypass authentication (skip-auth-regex), the proxy forwards client-supplied identity headers (X-Forwarded-User,...

CVE-2026-49331

A flaw was found in openshift/oauth-proxy. On paths configured to bypass authentication (skip-auth-regex), the proxy for

历史摘要 · 未重新核验 · NVD

#cve #cwe-345

漏洞预警2026-08-05 发布INFO

Improper Input Validation vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. A missing ownership check in the avatar-cleanup logic allows any au...

CVE-2026-48912

Improper Input Validation vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. A missing

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-05 发布INFO

Insufficient Verification of Data Authenticity vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. A missing authorization check in the external-l...

CVE-2026-48911

Insufficient Verification of Data Authenticity vulnerability in Apache Answer. This issue affects Apache Answer: throug

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-05 发布INFO

Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Unauthenticated attackers can cause a deni...

CVE-2026-48834

Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer. This issue affects Apache Answer: t

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-05 发布INFO

IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret.

CVE-2026-18531

IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use

历史摘要 · 未重新核验 · NVD

#cve #cwe-330

漏洞预警2026-08-05 发布INFO

A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user authentication. The issue occurs because the IdP-initiated Single...

CVE-2026-16442

A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user authenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-346

漏洞预警2026-08-05 发布INFO

IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by se...

CVE-2026-15656

IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cook

历史摘要 · 未重新核验 · NVD

#cve #cwe-614

漏洞预警2026-08-05 发布INFO

A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management. The "Allowed Protocol Mapper Types" policy, which restricts which types of data mapp...

CVE-2026-15572

A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management. The "Allowed Protocol Mappe

历史摘要 · 未重新核验 · NVD

#cve #cwe-843

漏洞预警2026-08-05 发布INFO

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privileged user to execute arbitrary commands with normal user pri...

CVE-2026-13477

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privilege

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-05 发布INFO

IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files.

CVE-2026-12762

IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensiti

历史摘要 · 未重新核验 · NVD

#cve #cwe-538

漏洞预警2026-08-05 发布INFO

IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Inter...

CVE-2026-12730

IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 throug

历史摘要 · 未重新核验 · NVD

#cve #cwe-297

漏洞预警2026-08-05 发布INFO

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE) injection vulnerability. The vulnerability resides in the pars...

CVE-2026-10025

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE) injec

历史摘要 · 未重新核验 · NVD

#cve #cwe-611

威胁情报2026-08-07 发布INFO

决赛直播｜第四届阿里CTF安全挑战赛

第四届阿里CTF安全挑战赛（AliCTF）决赛直播活动由阿里组织，在先知社区平台发布相关公告。该活动为面向安全社区与白帽黑客的竞赛，旨在通过实战化题目锻炼参与者发现漏洞、分析恶意代码、理解攻防对抗的能力。报道内容聚焦于赛事直播的时间安排与观

历史摘要 · 未重新核验 · 先知社区

#xianzhi #community #research

威胁情报2026-08-07 发布INFO

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

本文内容并非威胁情报，而是阿里云在先知社区发布的2027届实习生招聘公告。公告旨在招募AI时代顶尖安全团队实习生，未涉及任何网络攻击事件、漏洞信息、恶意软件、攻击组织或IOC。用户误将其作为威胁情报输入，实际无安全分析价值。

历史摘要 · 未重新核验 · 先知社区

#xianzhi #community #research

威胁情报2026-08-07 发布INFO

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

#ddos #botnet #akamai

威胁情报2026-08-07 发布INFO

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

#ddos #botnet #akamai

威胁情报2026-08-07 发布INFO

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

#ddos #botnet #akamai

威胁情报2026-08-07 发布INFO

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

#government #cncert #report

威胁情报2026-08-07 发布INFO

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT

#government #cncert #report