关于腾讯混元大模型部分接口下线及服务调整通知
关于腾讯混元大模型部分接口下线及服务调整通知
2026-08-31 归档
今日共收录 884 条安全情报，包含 132 个 CVE，408 篇安全通告，以及 86 篇研究论文。
← 返回归档列表A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. ...
CVE-2026-82593
A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgr
A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint....
CVE-2026-82592
A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDisk
A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa We...
CVE-2026-82542
A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the fi
A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Execu...
CVE-2026-82539
A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of t
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
GraftyVul: Synthesising Insecure Programs Through Real-World Vulnerability Grafting
本文提出了 GraftyVul，一个通过将真实世界漏洞“嫁接”到开源项目中来自动构造含漏洞程序的数据集生成系统。现有漏洞数据集通常难以同时满足多样性（语言和漏洞类型）、可复现性与可执行性以及真实性这三项要求：部分数据集使用人工构造或合成代码
京公网安备 11000002002063号
该输入来源标称为‘360CERT 安全报告’，但实际提供的标题为‘京公网安备 11000002002063号’，且来源URL指向全国公安网站备案管理系统（beian.gov.cn）的备案记录查询页面，与威胁情报报告应有的内容完全不符。正文摘
京网文〔2020〕6051-1195号
本次输入内容仅包含一个疑似网站备案或许可证编号（京网文〔2020〕6051-1195号），来源为360CERT安全报告页面，但未提供任何正文、摘要或技术细节。文中既未提及漏洞CVE、攻击组织、恶意软件家族，也未列出受影响行业、地区或ATT&
京ICP证080047号[京ICP备08010314号-6]
本次输入未提供有效的威胁情报内容，无法生成技术性摘要。标题为‘京ICP证080047号[京ICP备08010314号-6]’，该字符串为中华人民共和国工业和信息化部ICP备案号，通常用于网站备案标识，并非安全事件或攻击活动描述。来源标注为‘
A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function set_range_matrix_on_string_array of the file src/Common/opcua_types/sopc_built...
CVE-2026-82618
CVE-2026-82618 是 Systerel S2OPC 产品（OPC UA 通信栈）中披露的一个安全漏洞，影响版本为 1.7.3 及之前版本。漏洞位于 src/Common/opcua_types/sopc_builtintypes
A vulnerability has been found in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function Customer::find_phone of the file /passwordrecover.php of the ...
CVE-2026-82615
CVE-2026-82615 是 itsourcecode Online Medicine Delivery System（在线药品配送系统）1.0 版本中发现的一个 SQL 注入漏洞。该漏洞位于 /passwordrecover.php
A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the compone...
CVE-2026-82614
CVE-2026-82614 影响 itsourcecode Online Medicine Delivery System 1.0，属于 Product Category Filter Interface 组件的 /index.php?q
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_phoenix writes the entire raw submitted param map into an exception message, so sec...
CVE-2026-82727
AshPhoenix是一个基于Phoenix框架的Elixir库，用于构建表单。在AshPhoenix.Form.Auto模块中，当构建联合类型（union）子表单时，如果用户提交的_union_type参数与配置的合法类型不匹配，库会抛出
Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_phoenix lets an attacker who controls filter form parameters filter across relationships the re...
CVE-2026-82725
ash_phoenix 的 FilterForm 组件存在授权绕过漏洞（CVE-2026-82725）。该漏洞源于 FilterForm 在处理用户可控的过滤表单参数时，错误地使用 Ash.Resource.Info.related/2 解
Incorrect Authorization vulnerability in ash-project ash_phoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the...
CVE-2026-82724
CVE-2026-82724 是 ash-project 的 ash_phoenix 库中的一个授权不当漏洞。问题源于 LiveView 生命周期钩子执行顺序：SubdomainHook.on_mount 中先附加了 handle_para
A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultList of the file /index.php?q=product of the component Prod...
CVE-2026-82613
CVE-2026-82613 是 itsourcecode Online Medicine Delivery System 1.0 中一个已公开的 SQL 注入漏洞。漏洞位置位于产品搜索接口（/index.php?q=product）的 l
A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList of the file /index.php?q=si...
CVE-2026-82612
CVE-2026-82612 是 itsourcecode Online Medicine Delivery System 1.0 中存在的一个 SQL 注入漏洞。该漏洞位于产品详情页的 /index.php?q=single-item 文
A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function Customer::cusAuthentication of the file /login...
CVE-2026-82611
CVE-2026-82611 影响 itsourcecode Online Medicine Delivery System 1.0（在线药品配送系统）。该漏洞存在于客户登录接口（Customer Login Interface）的 /lo