2026-08-18 归档

今日共收录 810 条安全情报,包含 28 个 CVE,396 篇安全通告,以及 98 篇研究论文。

← 返回归档列表
漏洞预警2026-08-17 发布HIGH

A security vulnerability has been identified in Planet9 due to incorrect file permissions assigned to an application executable used by the Planet9 background service. The servi...

CVE-2026-50602

CVE-2026-50602 是 Planet9 软件中的一个本地权限提升漏洞,根因在于 Planet9 后台服务所使用的一个应用程序可执行文件被分配了错误的文件权限。该后台服务以 Windows SYSTEM 权限运行,但受影响的执行文件

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布HIGH

A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An at...

CVE-2026-50601

Planet9 是 Acer 推出的一款桌面应用程序,本次发现的安全漏洞源自该程序内置了一个硬编码的只读 API 密钥。这一密钥被硬编码在客户端中,使得任何能够分析或逆向该应用的攻击者都能提取该密钥。由于该密钥被赋予了对 Acer 内部代码

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布MEDIUM

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub_44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptest_macaddress. ...

CVE-2026-19976

CVE-2026-19976 是 COMFAST CF-N1-S 路由器固件 2.6.0.1 中被披露的命令注入漏洞。漏洞位于 /cgi-bin/mbox-config 接口的函数 sub_44A968 中,通过 method=SET 且

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布LOW

A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the component...

CVE-2026-19975

CVE-2026-19975 是 Azuriom CMS 1.2.12 及之前版本中存在的一个时间-of-check到时间-of-use(TOCTOU)类逻辑缺陷,具体位于 Money Transfer Handler 组件的 app/Ht

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布MEDIUM

A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulnerability affects the function std::strncmp of the file src/tsessioncookiestor...

CVE-2026-19974

CVE-2026-19974 是 treefrogframework 的 treefrog-framework 项目(至 2.11.2 版本)中的一个安全漏洞。该漏洞位于 src/tsessioncookiestore.cpp 文件中的 s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布MEDIUM

A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performi...

CVE-2026-19973

CVE-2026-19973 是 itsourcecode 开发的医院管理系统(Hospital Management System)1.0 版本中存在的 SQL 注入漏洞。漏洞位于 /viewpaymentreport.php 文件,攻击

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布MEDIUM

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argument de...

CVE-2026-19972

CVE-2026-19972 是公开披露的一个 SQL 注入漏洞,影响 itsourcecode 公司开发的 Hospital Management System (医院管理系统) 1.0 版本。该漏洞位于系统文件 /viewpatient

历史摘要 · 未重新核验 · NVD

威胁情报2026-08-18 发布INFO

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-18 发布INFO

Cloud ManagerManage your cloud computing services

Cloud ManagerManage your cloud computing services

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-08-18 发布INFO

See all Cloud Computing

See all Cloud Computing

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-08-18 发布INFO

智利银行在勒索软件攻击后关闭所有分行

智利银行在勒索软件攻击后关闭所有分行

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-08-18 发布INFO

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-18 发布INFO

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-18 发布INFO

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-18 发布INFO

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-18 发布INFO

CrowdStrike Services and Agentic MDR Put the Agentic SOC in Reach

CrowdStrike Services and Agentic MDR Put the Agentic SOC in Reach

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-18 发布INFO

Threat Hunting & Intel

Threat Hunting & Intel

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-18 发布INFO

Endpoint Security & XDR

Endpoint Security & XDR

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-18 发布INFO

Engineering & Tech

Engineering & Tech

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-18 发布INFO

EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware

EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware

历史摘要 · 未重新核验 · CrowdStrike