2026-09-02 归档

今日共收录 1494 条安全情报,包含 600 个 CVE,479 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-08-31 发布INFO

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destru...

CVE-2026-13732

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic read/search permissi...

CVE-2026-83497

Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

oasdiff-action is a GitHub Action that detects breaking changes in OpenAPI specs and post a review on every pull request. Before version 0.0.51, the oasdiff actions resolved ext...

CVE-2026-53507

oasdiff-action is a GitHub Action that detects breaking changes in OpenAPI specs and post a review on every pull request

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), eth_bridge_input_process() in subsys/net/l2/ethernet/bridge/bridge_input.c decides how each frame received on a b...

CVE-2026-14696

When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), eth_bridge_input_process() in subsys/net/l2/ethernet/bri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

The LwM2M JSON content formatter's get_string() in subsys/net/lib/lwm2m/lwm2m_rw_json.c copies a parsed JSON string into a caller-supplied buffer and NUL-terminates it. The leng...

CVE-2026-14368

The LwM2M JSON content formatter's get_string() in subsys/net/lib/lwm2m/lwm2m_rw_json.c copies a parsed JSON string into

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

The I3C IBI subsystem in drivers/i3c/i3c_ibi_workq.c hands out statically-allocated work nodes through a free-list i3c_ibi_work_nodes_free implemented as a plain sys_slist_t, wh...

CVE-2026-14367

The I3C IBI subsystem in drivers/i3c/i3c_ibi_workq.c hands out statically-allocated work nodes through a free-list i3c_i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read.

CVE-2023-31308

A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentially leading to arbitrary code execu...

CVE-2023-20511

Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was found in dibo-software diboot 3.8.0. Affected by this issue is some unknown functionality of the file /admin/ of the component Tenant Administrator Managemen...

CVE-2026-82817

A vulnerability was found in dibo-software diboot 3.8.0. Affected by this issue is some unknown functionality of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of the component Middleware. This manipulation of the argument...

CVE-2026-82815

A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the function TBGlobal.GetToken of the file tubebuddymaster1.js. The...

CVE-2026-82813

A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the functi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version...

CVE-2026-79746

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate end

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to retrieve administrative import and export endpoi...

CVE-2026-51727

Incorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated atta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but perfo...

CVE-2026-19953

URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in

历史摘要 · 未重新核验 · NVD

学术论文2026-08-31 发布INFO

Explainable Artificial Intelligence for Industrial Cybersecurity: A Review of Methods, Operational Integration, and Research Challenges

本文是一篇关于可解释人工智能(XAI)在工业网络安全中应用的综述性论文。随着工业基础设施的日益数字化以及信息技术(IT)与运营技术(OT)的融合,工业系统的网络攻击面显著扩大。为应对日益复杂的网络威胁,人工智能(AI)和机器学习(ML)技术

历史摘要 · 未重新核验 · arXiv cs.CR

威胁情报2026-09-02 发布INFO

决赛直播|第四届阿里CTF安全挑战赛

根据来源可确认的信息,这是一个关于“第四届阿里CTF安全挑战赛”的决赛直播公告,发布平台为阿里系的安全社区“先知社区”,发布时间为2026年9月2日。文章本身没有附带任何正文摘要或技术细节,仅有标题和来源。阿里CTF是阿里巴巴集团主办的面向

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-09-02 发布INFO

Control CenterManage your security and delivery services

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-09-02 发布INFO

See all Cybersecurity

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-09-02 发布INFO

Our Infrastructure

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-09-02 发布INFO

OpenClaw安全使用实践指南

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT