2026-09-20 归档

今日共收录 942 条安全情报，包含 169 个 CVE，438 篇安全通告，以及 68 篇研究论文。

漏洞预警2026-09-18 发布INFO

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.0, the POST /account-pool/page endpoint allows an a...

CVE-2026-52745

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior t

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-18 发布INFO

IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete in...

CVE-2026-17619

IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which co

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-18 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands.

CVE-2026-17262

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-18 发布INFO

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to improper va...

CVE-2026-11727

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-09-18 发布INFO

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of me...

CVE-2026-11726

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or c

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability.

CVE-2026-11722

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vuln

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-09-18 发布INFO

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager start...

CVE-2026-11716

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or pote

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component.

CVE-2026-11711

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service componen

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers.

CVE-2026-11710

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability.

CVE-2026-11548

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vuln

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks.

CVE-2026-11545

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the admi

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet.

CVE-2026-11540

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector.

CVE-2026-11539

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX conne

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-18 发布INFO

An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid library may allow an unauthenticated party to cause excessive proce...

CVE-2026-93761

An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid library ma

历史摘要 · 未重新核验 · NVD

#cve #cwe-1333

威胁情报2026-09-20 发布INFO

决赛直播｜第四届阿里CTF安全挑战赛

本文是先知社区（阿里云安全社区）发布的一则赛事通告，内容为第四届阿里CTF安全挑战赛的决赛直播信息。从标题与来源标签（xianzhi、community、research）判断，这是一场由厂商主办、面向安全研究人员与高校/企业安全从业者的公

历史摘要 · 未重新核验 · 先知社区

#xianzhi #community #research

威胁情报2026-09-20 发布INFO

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

本条内容来源为先知社区（阿里云旗下安全技术社区），标题为《抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！》，发布时间为 2026-09-20。从标题与来源元数据判断，这是一篇面向 2027 届毕业生的实习生招聘宣传稿，主题围

历史摘要 · 未重新核验 · 先知社区

#xianzhi #community #research

威胁情报2026-09-20 发布INFO

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #botnet #ddos

威胁情报2026-09-20 发布INFO

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #botnet #ddos

威胁情报2026-09-20 发布INFO

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #botnet #ddos

威胁情报2026-09-20 发布INFO

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

#government #report #cncert