2026-08-10 归档

今日共收录 768 条安全情报,包含 81 个 CVE,374 篇安全通告,以及 66 篇研究论文。

← 返回归档列表
安全公告2026-08-09 发布INFO

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...

CVE-2026-71993

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function tha

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-09 发布INFO

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...

CVE-2026-71989

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-09 发布INFO

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...

CVE-2026-71992

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-09 发布INFO

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...

CVE-2026-71990

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function u

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-09 发布INFO

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...

CVE-2026-71988

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-09 发布INFO

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...

CVE-2026-71987

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-09 发布INFO

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...

CVE-2026-71991

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function u

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-09 发布INFO

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...

CVE-2026-71986

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-09 发布INFO

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...

CVE-2026-71984

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-09 发布INFO

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...

CVE-2026-71985

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol functi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-09 发布INFO

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...

CVE-2026-71983

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-10 发布INFO

Ivanti Endpoint Manager Mobile代码注入漏洞

Ivanti Endpoint Manager Mobile代码注入漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-08-10 发布INFO

Yokogawa YFGW410 gateway

Yokogawa YFGW410 gateway

历史摘要 · 未重新核验 · 知道创宇 / Seebug

学术论文2026-08-10 发布INFO

BGPy: The BGP Python Security Simulator.

本文介绍了 BGPy,一个开源的、可扩展的、健壮的、易于使用且高效的 BGP(边界网关协议)安全模拟器,旨在用于研究和教育。尽管 BGP 的安全性及其域间路由的重要性众所周知,且多年来经历了多次攻击和事件,也开展了大量研究和努力,但该领域的

历史摘要 · 未重新核验 · USENIX Security

学术论文2026-08-10 发布INFO

The EMV Standard: Break, Fix, Verify.

EMV is the international protocol standard for smartcard payment and is used in over 9 billion cards worldwide. Despite

历史摘要 · 未重新核验 · IEEE S&P

威胁情报2026-08-10 发布INFO

CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access

CrowdStrike 与 Zscaler 宣布合作,将其安全解决方案集成,以提供对零信任访问的持续身份验证。该合作伙伴关系旨在帮助企业安全团队实现更精细的访问控制,通过结合 CrowdStrike 的端点检测与响应(EDR)能力和 Zsc

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-10 发布INFO

CrowdStrike Announces Continuous Identity for AI Agents

CrowdStrike于2026年8月10日发布官方博客,宣布推出面向AI代理的持续身份功能(Continuous Identity for AI Agents)。该公告表明CrowdStrike正在将其身份安全能力扩展到人工智能代理场景,

历史摘要 · 未重新核验 · CrowdStrike

安全公告2026-08-10 发布INFO

Citrix NetScaler 内存泄漏(CVE-2025-5777)

CVE-2025-5777

Citrix NetScaler 内存泄漏(CVE-2025-5777)

历史摘要 · 未重新核验 · 知道创宇 / Seebug

学术论文2026-08-10 发布INFO

SugarCoat: Programmatically Generating Privacy-Preserving, Web-Compatible Resource Replacements for Content Blocking.

本文提出 SugarCoat,一种自动生成隐私保护且网页兼容的资源替换方案,以解决内容拦截工具中的隐私与功能权衡问题。当前许多广告拦截和隐私保护工具为了不破坏网站功能,会对大量具有隐私风险的脚本进行豁免,导致这些脚本仍能访问敏感数据。Sug

历史摘要 · 未重新核验 · ACM CCS

安全公告2026-08-09 发布INFO

A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA...

CVE-2026-10595

A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemen

历史摘要 · 未重新核验 · GitHub Advisory