A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected...
CVE-2026-19926
A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown
2026-08-17 归档
今日共收录 803 条安全情报，包含 111 个 CVE，370 篇安全通告，以及 71 篇研究论文。
← 返回归档列表Ivanti Endpoint Manager Mobile代码注入漏洞
根据知道创宇/Seebug漏洞库(SSVID-99967)披露的信息，Ivanti Endpoint Manager Mobile（EPMM）存在代码注入漏洞。EPMM是企业级移动设备管理平台，用于集中管理移动设备、应用与安全策略，通常部署
Yokogawa YFGW410 gateway
知道创宇 Seebug 漏洞库收录了一条关于横河电机（Yokogawa）YFGW410 网关的漏洞公告。YFGW410 是横河电机推出的工业无线通信网关设备，常用于流程工业现场，负责将无线现场设备的数据接入控制系统，属于工业控制网络中的关键
【腾讯云认证】腾讯私有云交付运维工程师 - 里约智能网关认证下架公告
腾讯云发布公告，宣布“腾讯私有云交付运维工程师 - 里约智能网关认证”正式下架。该认证是腾讯云针对私有云交付运维工程师在里约智能网关相关技能的一项专项认证。公告仅说明认证下架，未提供具体下架原因、替代认证方案或对已获证人员的影响说明。此公告
Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter...
CVE-2026-74790
Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused T
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that...
CVE-2026-73061
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code t
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
本文是CrowdStrike与Zscaler两家网络安全厂商于2026年8月17日发布的合作公告，宣布将“持续身份（Continuous Identity）”能力集成到零信任访问（Zero Trust Access）解决方案中。CrowdS
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike 于 2026 年 8 月 17 日发布公告，宣布推出名为 “Continuous Identity for AI Agents” 的全新功能。该功能旨在解决 AI 代理（智能体）在企业环境中面临的身份安全挑战。随着以
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
多款Huawei路由器信息泄露漏洞
多款Huawei路由器信息泄露漏洞
FuzzBT: Holistic-State-Guided Fuzzing for Bluetooth Host Stack in Kernels.
该论文提出 FuzzBT，一种面向内核中蓝牙主机栈的、以整体状态引导的模糊测试方法。蓝牙协议栈在现代操作系统内核中广泛存在，且暴露于不可信蓝牙流量，是安全攻击的重要面。现有模糊测试工具往往仅关注单个协议层或孤立的状态，难以有效覆盖跨层、跨连
Trust Me, I Know This Function: Hijacking LLM Static Analysis using Bias.
该论文题目为《Trust Me, I Know This Function: Hijacking LLM Static Analysis using Bias》，作者包括 Shir Bernstein、David Beste、Daniel
A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function...
CVE-2026-19959
A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /gofor
A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey...
CVE-2026-19961
A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/fo
SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication...
CVE-2026-73056
SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vulnerability i
Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0...
CVE-2026-19349
Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl a
The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable...
CVE-2024-13784
The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to PHP Object Injection
The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data...
CVE-2026-18316
The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capab