2026-09-29 归档

今日共收录 1279 条安全情报，包含 376 个 CVE，505 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-27 发布INFO

Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows privileged users to specify arbitrary URLs without destina...

CVE-2026-101064

Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows p

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-27 发布INFO

Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/* when registry authentication is enabled. Unauthenticated attackers can read r...

CVE-2026-101063

Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/* when registry authen

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-27 发布INFO

A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the file du-common/src/main/java/com/edu/common/utils/file/Mime...

CVE-2026-100880

A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-09-27 发布INFO

A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of the component dataS...

CVE-2026-100879

A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed o

历史摘要 · 未重新核验 · NVD

#cve #cwe-862 #cwe-863

漏洞预警2026-09-27 发布INFO

A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.isAdmin of the file edu-common/src/main/java/com/edu/common...

CVE-2026-100878

A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.is

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639

漏洞预警2026-09-27 发布INFO

A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functional...

CVE-2026-100877

A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-09-27 发布INFO

A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak application from an OCI remote, allowing discl...

CVE-2026-96279

A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-09-27 发布INFO

A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file loginlinkstudent...

CVE-2026-100876

A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Aff

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-27 发布INFO

A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatedeta...

CVE-2026-100875

A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-27 发布INFO

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file addnewstudent.php. ...

CVE-2026-100874

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This af

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-27 发布INFO

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function. The manipula...

CVE-2026-100873

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be.

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-862

学术论文2026-09-28 发布INFO

Long-Term Operational Planning Using Scenario-Based System Load Forecasting

该论文研究的是美国北弗吉尼亚地区超大规模数据中心快速扩张所带来的电力负荷激增问题。区域主要电力公司 Dominion Energy 必须对输电网进行加固和扩建以支撑这一增长，而此类工程依赖计划性停电（planned outage），需要提前

历史摘要 · 未重新核验 · arXiv cs.CR

#grid-security #critical-infrastructure #load-forecasting #ot-security #reliability

威胁情报2026-09-29 发布INFO

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

本文并非威胁情报或漏洞分析内容，而是先知社区（阿里云旗下安全技术社区）发布的一则招聘公告，主题为阿里云面向 2027 届毕业生招募安全方向实习生，宣传口号强调“抢先加入 AI 时代顶尖安全团队”。原文正文摘录为空，输入数据中未包含具体岗位职

历史摘要 · 未重新核验 · 先知社区

#community #research #xianzhi

威胁情报2026-09-29 发布INFO

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #ddos #botnet

威胁情报2026-09-29 发布INFO

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #ddos #botnet

威胁情报2026-09-29 发布INFO

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

#akamai #ddos #botnet

威胁情报2026-09-29 发布INFO

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

#report #cncert #government

威胁情报2026-09-29 发布INFO

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT

#report #cncert #government

威胁情报2026-09-29 发布INFO

关于“独狼”团伙大规模传播恶意程序的风险提示

历史摘要 · 未重新核验 · CNCERT

#report #cncert #government

威胁情报2026-09-29 发布INFO

关于RCtea僵尸网络大范围传播的风险提示

历史摘要 · 未重新核验 · CNCERT

#report #cncert #government