SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle
CVE-2026-73080
### Impact `VolumeServer.FetchAndWriteNeedle` fetches a caller-supplied remote endpoint and writes the response into a n
2026-08-12 归档
今日共收录 1910 条安全情报，包含 1065 个 CVE，437 篇安全通告，以及 97 篇研究论文。
← 返回归档列表Cisco warns of ASA and FTD VPN flaw exploited to crash devices
Cisco 发布安全警告，称其 Secure Firewall ASA 和 Firepower Threat Defense (FTD) 软件中存在一个高严重度的拒绝服务（DoS）漏洞，该漏洞正被攻击者积极利用，通过远程方式使受影响设备崩溃
ConTest: Taming the Cyber-physical Input Space in Fuzz Testing with Control Theory.
本文针对信息物理系统（Cyber-Physical Systems, CPS）中模糊测试面临的输入搜索空间过大的问题，提出了一种基于控制理论的解决方案。随着CPS在日常生活中日益普及，其安全性成为紧迫议题。虽然模糊测试在自动检测漏洞方面受到
Ivanti Endpoint Manager Mobile代码注入漏洞
该公告来自知道创宇Seebug漏洞库，披露了Ivanti Endpoint Manager Mobile存在代码注入漏洞。Ivanti Endpoint Manager Mobile是一款企业级移动设备管理（MDM）解决方案，用于集中管理移
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
知道创宇 Seebug 漏洞库收录了一条关于天融信（TOPSEC）防火墙的远程利用漏洞公告，编号为 SSVID-92331，并附带代号“ELIGIBLEBACHELOR”。该条目标注的发布时间为 2026-08-12，来源为知道创宇/See
Huawei Secoway USG firewall weak password
根据知道创宇 Seebug 于 2026-08-11 发布的安全公告，华为 Secoway USG 防火墙存在弱密码问题。该公告的标题中明确指出了‘弱密码’（weak password）这一风险点，但公告正文未提供具体的技术细节、影响范围、
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Yokogawa YFGW410 gateway
Yokogawa YFGW410 gateway
【腾讯云认证】腾讯私有云交付运维工程师 - 里约智能网关认证下架公告
【腾讯云认证】腾讯私有云交付运维工程师 - 里约智能网关认证下架公告
Sandworm hackers target IT pros with trojanized WireGuard VPN client
根据BleepingComputer的报道，俄罗斯关联的威胁组织Sandworm（又称APT44、Fancy Bear等）自2026年5月起，通过虚假的招聘信息诱导系统管理员和IT专业人员下载被特洛伊木马化的WireGuard VPN客户端
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
乌克兰计算机应急响应小组（CERT-UA）于2026年8月披露了一场新的针对该国IT工作者的社交工程攻击活动。该活动被编号为UAC-0145，归属于俄罗斯军事情报机构GRU旗下的高级持续性威胁组织Sandworm（又称APT44）的一个子集
The login endpoint on the Mira cloud API accepts any format-valid string in the password field...
CVE-2026-68067
The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active
The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive...
CVE-2026-67568
The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from int
Alert for CVE-2021-44228
CVE-2021-44228
Alert for CVE-2021-44228
Synthesis of Sound and Precise Leakage Contracts for Open-Source RISC-V Processors.
该论文针对开源 RISC-V 处理器中微架构侧信道的信息泄露问题，提出了一种自动化合成泄漏合约（leakage contracts）的方法。泄漏合约是近期提出的、用于指令集架构（ISA）层面的安全抽象，旨在精确刻画处理器通过微架构侧信道可能
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike Announces Continuous Identity for AI Agents
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2026-19177 Insufficient validation of untrusted input in UI
CVE-2026-19177
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
CVE-2026-19176 Use after free in Skia
CVE-2026-19176
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.