2026-08-24 归档

今日共收录 798 条安全情报,包含 82 个 CVE,390 篇安全通告,以及 72 篇研究论文。

← 返回归档列表
漏洞预警2026-08-24 发布HIGH

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a ...

CVE-2026-78157

CVE-2026-78157 是 Open5GS 2.8.0 中存在的一个远程可利用的越界读取漏洞。该漏洞位于 PCRF(策略与计费规则功能)组件的 Rx AA-Request 处理函数 pcrf_rx_aar_cb(src/pcrf/pc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布HIGH

A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hss_ogs_diam_s6a_air_cb of the file src/hss/hss-s6a-path.c of the component S...

CVE-2026-78156

Open5GS 是一个开源 5G 核心网络实现。该 CVE 涉及 Open5GS 2.8.0 版本中 HSS(归属用户服务器)的 S6a 接口的 Authentication-Information-Request(AIR)处理函数。具体函

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布HIGH

A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem_invitation_code of the file backend/app/api/routes/v1/user_invitation...

CVE-2026-78154

CVE-2026-78154 是 the-momentum open-wearables 项目中存在的一个高危害性安全漏洞。该漏洞影响 0.6.2 及更早版本,具体位置在后端用户邀请码兑换功能中。攻击者通过构造特殊的邀请码参数,可在无需身份

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布MEDIUM

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc_server::graph_compute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component g...

CVE-2026-78148

CVE-2026-78148 是影响 ggml-org llama.cpp 的一个远程可利用漏洞,具体存在于 ggml-RPC Server 组件的 rpc_server::graph_compute 函数中(文件路径 ggml/src/g

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布HIGH

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component gg...

CVE-2026-78147

CVE-2026-78147 是 ggml-org llama.cpp 中发现的一个安全漏洞,影响其 ggml-RPC 服务器组件中的 deserialize_tensor 函数(位于 ggml/src/ggml-rpc/ggml-rpc.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布MEDIUM

A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function _is_safe_url of the file CTFd/utils/validators/__init__.py. Such manipulation of the arg...

CVE-2026-78145

CVE-2026-78145 是 CTFd 平台(版本至 3.8.4)中存在的一个开放重定向漏洞。漏洞位于 CTFd/utils/validators/__init__.py 文件中的 _is_safe_url 函数,该函数对 Next 参

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布MEDIUM

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarde...

CVE-2026-78144

CVE-2026-78144涉及code-projects Barangay Resident Profiling Management System 1.0中的授权绕过漏洞。该漏洞位于Boarder Management模块的/board

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布HIGH

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Res...

CVE-2026-78143

CVE-2026-78143 影响 code-projects 开发的 Barangay Resident Profiling Management System 1.0(描笼涯居民档案管理系统)。漏洞位于 residents.php 文件

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布MEDIUM

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archived_records.php of the component...

CVE-2026-78142

该漏洞存在于 code-projects 开发的 Barangay Resident Profiling Management System 1.0 中,这是一个用于村镇居民档案管理的Web应用。漏洞位于 /archived_records

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布HIGH

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to...

CVE-2026-78141

CVE-2026-78141 是一个影响 Tenda CH22 路由器固件版本 1.0.0.1 的命令注入漏洞。该漏洞位于 /goform/exeCommand 文件中的 formexeCommand 函数,攻击者可以通过操纵参数 cmdi

历史摘要 · 未重新核验 · NVD

威胁情报2026-08-24 发布INFO

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-24 发布INFO

Cloud ManagerManage your cloud computing services

Cloud ManagerManage your cloud computing services

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-08-24 发布INFO

See all Cloud Computing

See all Cloud Computing

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-08-24 发布INFO

智利银行在勒索软件攻击后关闭所有分行

智利银行在勒索软件攻击后关闭所有分行

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-08-24 发布INFO

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-24 发布INFO

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-24 发布INFO

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-24 发布INFO

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-24 发布INFO

Threat Hunting & Intel

Threat Hunting & Intel

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-24 发布INFO

Endpoint Security & XDR

Endpoint Security & XDR

历史摘要 · 未重新核验 · CrowdStrike