APSB26-125: Security update available for Adobe XD
APSB26-125: Security update available for Adobe XD
2026-08-30 归档
今日共收录 849 条安全情报，包含 76 个 CVE，428 篇安全通告，以及 85 篇研究论文。
← 返回归档列表APSB26-129: Security update available for Adobe Substance 3D Painter
APSB26-129: Security update available for Adobe Substance 3D Painter
APSB26-134: Security update available for Adobe Campaign Classic
APSB26-134: Security update available for Adobe Campaign Classic
【云数据库 MySQL】关于部分 API 接入 CAM 鉴权公告
【云数据库 MySQL】关于部分 API 接入 CAM 鉴权公告
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】关于腾讯云 DeepSeek V4 【原厂直供】模型峰谷计费规则调整公告
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】关于腾讯云 DeepSeek V4 【原厂直供】模型峰谷计费规则调整公告
关于腾讯混元大模型部分接口下线及服务调整通知
关于腾讯混元大模型部分接口下线及服务调整通知
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Att...
CVE-2026-82460
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoint
argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCD_API_TOKEN is configured. Attackers...
CVE-2026-82456
argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller c
The Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in token verification. The decodeAppleToken function extracted t...
CVE-2026-82454
The Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in toke
rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures. Unau...
CVE-2026-82452
rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lac
Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attacke...
CVE-2026-82448
Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated
The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handle_form_submission function. This is due ...
CVE-2026-14494
The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated endpoints, relying on a hardcoded default, and does not vali...
CVE-2026-77012
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated end
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and ...
CVE-2026-16259
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthentic
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
京公网安备 11000002002063号
该条记录来自 360CERT 安全报告栏目，标题为“京公网安备 11000002002063号”，实际内容指向全国互联网安全管理服务平台（beian.gov.cn）的备案信息，而非真正意义上的威胁情报报告。输入中未提供任何攻击活动描述、技术
A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parse_request of the file trick_source/sim_services/JSONVariableSe...
CVE-2026-82478
CVE-2026-82478 是 NASA Trick 仿真框架 19.6.0 版本中存在的一个栈缓冲区溢出漏洞。该漏洞位于 TCP Socket Handler 组件的 JSONVariableServerThread::parse_re
Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sqlite allows an attacker who controls a get_path/2 segment to traverse into nes...
CVE-2026-77846
CVE-2026-77846 是 ash-project 的 ash_sqlite 组件中存在的一处 JSON 查询路径注入漏洞。该库用于在 SQLite 中存储和查询 Ash 数据模型。其 SqlImplementation 在构建 SQ
Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource to recover sensitiv...
CVE-2026-77970
ash_paper_trail 是 Ash 框架的审计/版本化扩展，用于跟踪资源变更。该漏洞影响 0.3.0 至 0.7.0 之前版本。漏洞源于敏感属性处理不完整：sensitive_attributes 配置中的 :redact 和 :i