hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary re...

CVE-2026-82859

hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role p

历史摘要 · 未重新核验 · NVD

@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, allowing untrusted reconciliation input to be treated as t...

CVE-2026-82858

@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, a

历史摘要 · 未重新核验 · NVD

hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that allows role lifecycle operations on af-e2e-* roles without s...

CVE-2026-82857

hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that all

历史摘要 · 未重新核验 · NVD

@hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators in GitHub OIDC trust policies. Attackers can use ForAnyValue:StringLik...

CVE-2026-82856

@hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators in GitHub OID

历史摘要 · 未重新核验 · NVD

@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-governance validators that allows attackers to suppress v...

CVE-2026-82855

@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-

历史摘要 · 未重新核验 · NVD

Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom envelope object with a size ...

CVE-2026-82854

Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an

历史摘要 · 未重新核验 · NVD

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface cou...

CVE-2026-58574

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with

历史摘要 · 未重新核验 · NVD

A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument...

CVE-2026-82616

A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the fi

历史摘要 · 未重新核验 · NVD

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. ...

CVE-2026-82593

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgr

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint....

CVE-2026-82592

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDisk

历史摘要 · 未重新核验 · NVD

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

历史摘要 · 未重新核验 · CNCERT

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More

The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the in

历史摘要 · 未重新核验 · The Hacker News

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VMware hypervisors t

历史摘要 · 未重新核验 · The Hacker News

Drishti: AI-Led Human-Directed Vulnerability Auditing for 5G Cores

本文针对开源软件漏洞审计中“候选生成已不再稀缺，而验证与影响评估成为瓶颈”的现状，提出一个面向 5G 核心网（5G Core）的 AI 主导、人工参与的漏洞审计框架 Drishti。作者指出，AI 辅助代码审查可以低成本地生成大量缺陷候选，

历史摘要 · 未重新核验 · arXiv cs.CR

ARMOR: Manifold-Oriented Training for Adversarially Robust Aerial Object Detection under Data Scarcity

本文提出了一种名为 ARMOR（Adversarial Robustness with Manifold-Oriented Training）的新型防御方法，旨在解决空中目标检测模型在物理世界中对通用对抗性补丁的脆弱性，同时应对训练数据稀缺

历史摘要 · 未重新核验 · arXiv cs.CR

京公网安备 11000002002063号

本输入仅包含元数据，未提供任何有效的威胁情报正文或摘要。标题为“京公网安备 11000002002063号”，这是中国公安部网站备案号格式，源URL指向beian.gov.cn的备案信息查询页面，而非360CERT的正式安全报告页面。尽管来

历史摘要 · 未重新核验 · 360CERT 安全报告

（总）网出证（京）字第281号

本条输入来自标注为“360CERT 安全报告”的公开来源，但实际内容仅为一个网站备案许可证信息，标题为“（总）网出证（京）字第281号”，并非任何威胁情报分析报告。输入数据中不包含正文摘要、CVE编号、攻击者信息、恶意软件家族、受影响行业或

历史摘要 · 未重新核验 · 360CERT 安全报告

京网文〔2020〕6051-1195号

本次输入为一条来源标注为‘360CERT 安全报告’的情报条目，但正文摘要为空，仅包含页面标题‘京网文〔2020〕6051-1195号’（疑似联网备案号或占位文本）。条目标签标记为‘360、report、apt、malware’，但未提供任

历史摘要 · 未重新核验 · 360CERT 安全报告

京ICP证080047号[京ICP备08010314号-6]

本次情报条目提供的标题为"京ICP证080047号[京ICP备08010314号-6]"，来源标注为"360CERT安全报告"，但原始URL指向工信部ICP/IP地址/域名信息备案管理系统（beian.miit.gov.cn），并非360C

历史摘要 · 未重新核验 · 360CERT 安全报告