2026-08-26 归档

今日共收录 1656 条安全情报，包含 834 个 CVE，420 篇安全通告，以及 108 篇研究论文。

漏洞预警2026-08-24 发布INFO

A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array (VLA) on the stack withou...

CVE-2026-78475

A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image file, the plugin al

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey,...

CVE-2026-71905

Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerabil

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Si...

CVE-2026-34491

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls M

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-24 发布INFO

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image...

CVE-2026-78465

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plu

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-08-24 发布INFO

rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing direct...

CVE-2026-77914

rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitra

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-24 发布INFO

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search con...

CVE-2026-78416

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code ex

历史摘要 · 未重新核验 · NVD

#cve #cwe-915

漏洞预警2026-08-24 发布INFO

A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends. The webhook, Mattermost, Rocket.Chat, and Grafana notification backends use n...

CVE-2026-71366

A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends. The webhook, Matterm

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-24 发布INFO

A path traversal vulnerability was found in AWX's project archive extraction. The project_archive action plugin extracts zip and tar archive members by joining the project direc...

CVE-2026-71364

A path traversal vulnerability was found in AWX's project archive extraction. The project_archive action plugin extracts

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-24 发布INFO

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of pr...

CVE-2026-12556

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. The

历史摘要 · 未重新核验 · NVD

#cve #cwe-319

漏洞预警2026-08-24 发布INFO

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of pr...

CVE-2026-12555

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. The

历史摘要 · 未重新核验 · NVD

#cve #cwe-379

漏洞预警2026-08-24 发布INFO

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of pr...

CVE-2026-12554

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. The

历史摘要 · 未重新核验 · NVD

#cve #cwe-1104

漏洞预警2026-08-24 发布INFO

The userspace syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validated the nested msg->data/msg->size fields by reading them directly out of live userspace ...

CVE-2026-9728

The userspace syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validated the nested msg->data/msg->si

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

威胁情报2026-08-26 发布INFO

决赛直播｜第四届阿里CTF安全挑战赛

该情报来自阿里云先知社区，内容为第四届阿里CTF安全挑战赛的决赛直播公告。阿里CTF是阿里巴巴集团举办的安全技术竞赛，面向安全研究者和爱好者，旨在通过实战攻防挑战提升参赛者的安全技能。公告主要介绍决赛直播安排，属于社区活动性质，不涉及任何已

历史摘要 · 未重新核验 · 先知社区

#research #community #xianzhi

威胁情报2026-08-26 发布INFO

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

本条信息来自阿里云先知社区，内容为阿里云2027届实习生招聘公告，标题为‘抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！’。公告发布于2026年8月26日，属于社区招聘类信息，并非威胁情报事件。文中未涉及任何漏洞、攻击活动、

历史摘要 · 未重新核验 · 先知社区

#research #community #xianzhi

威胁情报2026-08-26 发布INFO

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

#botnet #akamai #ddos

威胁情报2026-08-26 发布INFO

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

#botnet #akamai #ddos

威胁情报2026-08-26 发布INFO

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

#botnet #akamai #ddos

威胁情报2026-08-26 发布INFO

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

#cncert #government #report

威胁情报2026-08-26 发布INFO

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT

#cncert #government #report

威胁情报2026-08-26 发布INFO

关于“独狼”团伙大规模传播恶意程序的风险提示

历史摘要 · 未重新核验 · CNCERT

#cncert #government #report