【云数据库 MySQL】关于部分 API 接入 CAM 鉴权公告
【云数据库 MySQL】关于部分 API 接入 CAM 鉴权公告
2026-08-27 归档
今日共收录 918 条安全情报，包含 88 个 CVE，417 篇安全通告，以及 120 篇研究论文。
← 返回归档列表【大模型服务平台 TokenHub】&【智能体开发平台 ADP】关于腾讯云 DeepSeek V4 【原厂直供】模型峰谷计费规则调整公告
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】关于腾讯云 DeepSeek V4 【原厂直供】模型峰谷计费规则调整公告
【大模型服务平台 TokenHub】 关于腾讯云 HY & YT 系列部分视频生成模型下线及计费调整的通知
【大模型服务平台 TokenHub】 关于腾讯云 HY & YT 系列部分视频生成模型下线及计费调整的通知
Early Stable Update for Desktop
The Stable channel has been updated to 153.0.8010.12/.13 for Windows and Mac as part of our early stable release to a sm
Chrome Beta for Desktop Update
The Beta channel has been updated to 153.0.8010.12 for Windows, Mac and Linux.A partial list of changes is available in
LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would trigger an out-of-bo...
CVE-2026-58096
LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by
mp_Enddisc() used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result buf...
CVE-2026-58095
mp_Enddisc() used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a
The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, ...
CVE-2026-19632
The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive In
ClipBucket V5's web installer fails to properly validate or escape the php_cli_filepath parameter before passing it to shell execution. Unauthenticated attackers can submit a cr...
CVE-2026-80138
ClipBucket V5's web installer fails to properly validate or escape the php_cli_filepath parameter before passing it to s
A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the...
CVE-2026-79911
A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the functio
Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScr...
CVE-2026-16645
Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Bro
Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.1.0.
CVE-2026-16644
Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST v
Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*.
CVE-2026-16641
Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*.
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internation...
CVE-2026-16639
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On all
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations
The U.S. Department of Justice (DoJ) on Wednesday announced the disruption of two hacking platforms named QScan and QTRo
AI Speeds Up Malware Development, Not Its Success Rate: Analysis
Palo Alto Networks Unit 42 analyzed 405 AI-linked malware samples and found only 12 reached production endpoints. The po
京公网安备 11000002002063号
本次输入并非真正的威胁情报文章，而是一个中国公安备案信息页面（备案号11000002002063号）。虽然来源标注为360CERT安全报告，但提供的URL指向beian.gov.cn的备案查询页面，且没有正文内容或技术摘要。标签包含报告、3
（总）网出证（京）字第281号
该输入为360CERT官网的一个页面，标题为“（总）网出证（京）字第281号”，通常此类页面是网站ICP备案或许可证信息，不包含任何漏洞、攻击活动、恶意软件或威胁行为体情报。由于没有正文摘要，且没有CVE、IOC、ATT&CK技术等数据，无