京网文〔2020〕6051-1195号
本次输入并非威胁情报文章，而是一份来自 360 官网（360.cn）的互联网文化经营许可证/备案公示页面，标题为“京网文〔2020〕6051-1195号”，这串编号是北京市网络文化经营许可证的行政备案编号，属于网站合规范畴的资质公示信息，与
2026-09-27 归档
今日共收录 1038 条安全情报，包含 222 个 CVE，481 篇安全通告，以及 74 篇研究论文。
← 返回归档列表A vulnerability was found in coollabsio Coolify up to 4.1.0. This affects the function Github::redirect of the file /webhooks/source/github/redirect of the component GitHub App ...
CVE-2026-100746
CVE-2026-100746 影响 coollabsio Coolify 4.1.0 及更早版本,问题出在 GitHub App 设置处理流程中的重定向功能 Github::redirect,对应 HTTP 路由为 /webhooks/s
heym before 0.0.105 fails to apply egress guards to integration services that use credential-supplied base URLs, allowing authenticated users to bypass SSRF protections. Attacke...
CVE-2026-100861
CVE-2026-100861 是 heym 项目在 0.0.105 版本之前存在的一个服务端请求伪造（SSRF）保护绕过漏洞。该漏洞的核心问题在于：heym 对集成服务（integration services）的出口流量防护（egres
AzuraCast before 0.23.8 contains a broken access control vulnerability in the GET /api/station/{id}/vue/profile endpoint that allows authenticated users with only View Station P...
CVE-2026-100851
AzuraCast 是一个开源的网络广播电台管理平台。CVE-2026-100851 指出，在 0.23.8 版本之前，其 GET /api/station/{id}/vue/profile 接口存在访问控制不当（Broken Access
AzuraCast before 0.23.8 contains a server-side request forgery and local file read vulnerability in the AutoDJ remote playlist fetch (backend/src/Radio/AutoDJ/QueueBuilder.php, ...
CVE-2026-100850
AzuraCast 0.23.8 之前的版本在 AutoDJ 远程播放列表抓取功能中存在服务端请求伪造（SSRF）与本地文件读取漏洞。具体位于 backend/src/Radio/AutoDJ/QueueBuilder.php 的 getM
AzuraCast is a self-hosted web radio management suite. In AzuraCast before 0.23.8, the station webhook URL validation in AbstractConnector::getValidUrl() (backend/src/Webhook/Co...
CVE-2026-100849
AzuraCast 是一款自托管的网络电台管理套件。CVE-2026-100849 影响 0.23.8 之前版本的 Webhook URL 校验逻辑：位于 backend/src/Webhook/Connector/AbstractConn
AzuraCast (Composer package azuracast/azuracast) before 0.23.8 validates a station's "Remote Relay" URL only for URL syntax and an http/https scheme (Utilities\Urls::parseUserUr...
CVE-2026-100848
AzuraCast（Composer 包 azuracast/azuracast）0.23.8 之前的版本存在服务端请求伪造（SSRF）漏洞。问题根源在于其“Remote Relay（远程中继）”URL 的校验逻辑过于宽松：Utilitie
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Cloud ManagerManage your cloud computing services
Cloud ManagerManage your cloud computing services
See all Cloud Computing
See all Cloud Computing
智利银行在勒索软件攻击后关闭所有分行
智利银行在勒索软件攻击后关闭所有分行
Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019
Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019
Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019
Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019
Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018
Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018
Threat Hunting & Intel
Threat Hunting & Intel
Endpoint Security & XDR
Endpoint Security & XDR
Engineering & Tech
Engineering & Tech
EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware
EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware
Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS
Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS
CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting
CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting