2026-10-05 归档

今日共收录 815 条安全情报，包含 115 个 CVE，364 篇安全通告，以及 81 篇研究论文。

漏洞预警2026-10-05 发布HIGH

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipul...

CVE-2026-105184

CVE-2026-105184 是 NVD 收录的一则 SQL 注入漏洞, 影响 itsourcecode 出品的 Online Admission System 1.0 (在线招生/录取管理系统)。漏洞位于后台管理路径下的文件 /admi

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-05 发布HIGH

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the ...

CVE-2026-105183

CVE-2026-105183 是 NVD 收录的一则 SQL 注入漏洞，影响 itsourcecode 出品的 Online Admission System 1.0（在线招生/录取管理系统）。漏洞位于后台脚本 /admin/confir

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-05 发布HIGH

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/activitie...

CVE-2026-105182

CVE-2026-105182 是 SourceCodester Online Reviewer Management System 1.0 中被披露的一个 SQL 注入漏洞。根据 NVD 元数据，问题位于文件 /reviewer_0/ad

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-05 发布MEDIUM

A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The manipulation of the argumen...

CVE-2026-105181

CVE-2026-105181 是 NVD 收录的一则 SQL 注入漏洞，影响 itsourcecode 出品的 Online Admission System（在线招生／报名系统）1.0 版本。问题出在 register1.php 文件对

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-05 发布MEDIUM

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System pri...

CVE-2026-20589

CVE-2026-20589 是一起出现在 venc(视频编码器,video encoder)组件中的内存安全漏洞,其根因是类型混淆(type confusion):组件在处理某个对象时使用了与其真实类型不匹配的解释方式,导致后续的写入操作

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-05 发布HIGH

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained th...

CVE-2026-20588

CVE-2026-20588 是联发科（MediaTek）mtee 组件中被 NVD 收录的一个本地权限提升漏洞。mtee 即 MediaTek Trusted Execution Environment，是运行在芯片安全世界中的可信执行环

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-05 发布MEDIUM

In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System...

CVE-2026-20587

该条记录来自 NVD，编号 CVE-2026-20587，涉及 MediaTek 的 mtee 组件（mtee 通常指运行于安全世界/可信执行环境一侧的安全固件组件）。漏洞根因是类型混淆（type confusion）：在处理对象或数据结构

历史摘要 · 未重新核验 · NVD

#cve #cwe-843

漏洞预警2026-10-05 发布HIGH

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed....

CVE-2026-20586

CVE-2026-20586 是一处披露于视频解码组件 vdec 中的内存安全漏洞。根据 NVD 元数据描述，该问题的根本原因是 vdec 在处理输入数据时缺少必要的边界检查（missing bounds check），导致可能出现越界写入

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-05 发布HIGH

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System pri...

CVE-2026-20579

CVE-2026-20579 是一条来自 NVD 的漏洞条目，问题位于名为 vdec 的组件中。根据官方描述，vdec 内部存在一处类型混淆（type confusion）缺陷：程序在处理某类对象时，错误地按另一种类型解释该对象的内存布局，

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-05 发布HIGH

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the devic...

CVE-2026-20544

CVE-2026-20544 是一条来自 NVD 的漏洞条目，受影响组件名为 meta。根据官方描述，该组件在实现上缺少必要的边界检查（missing bounds check），处理输入时可能发生越界写（out of bounds wri

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-05 发布LOW

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User i...

CVE-2026-20543

CVE-2026-20543 是一个影响 Modem 组件的信息泄露漏洞，源于逻辑错误。攻击者可在本地利用该漏洞获取敏感信息，无需额外执行权限，且无需用户交互。这意味着攻击者只需在受影响设备上拥有基本的本地访问能力，即可触发信息泄露。该漏洞

历史摘要 · 未重新核验 · NVD

#cve #cwe-215

漏洞预警2026-10-05 发布MEDIUM

In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System pri...

CVE-2026-20542

本条为 NVD 披露的 CVE-2026-20542 元数据摘要。漏洞位于 apusys(联发科 APU 人工智能加速器子系统的底层驱动组件,常见于 Android/移动终端与嵌入式平台的内核态代码)中,类型为释放后使用(use-after

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-10-05 发布MEDIUM

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station co...

CVE-2026-20541

该漏洞位于终端设备的 Modem(调制解调器/基带)组件中,根因是某处代码路径缺失必要的权限检查,使得本应受保护的数据访问得以执行,最终引发越界读取(out of bounds read)。攻击者若要触发该问题,需要让其控制或搭建的伪基站(

历史摘要 · 未重新核验 · NVD

#cve #cwe-126

威胁情报2026-10-05 发布INFO

京网文〔2020〕6051-1195号

历史摘要 · 未重新核验 · 360CERT 安全报告

#360 #apt #report #malware

威胁情报2026-10-05 发布INFO

（总）网出证（京）字第281号

历史摘要 · 未重新核验 · 360CERT 安全报告

#360 #apt #report #malware

威胁情报2026-10-05 发布INFO

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

历史摘要 · 未重新核验 · CrowdStrike

#apt #crowdstrike #edr

威胁情报2026-10-05 发布INFO

Cloud ManagerManage your cloud computing services

历史摘要 · 未重新核验 · Akamai Security Research

#ddos #akamai #botnet

威胁情报2026-10-05 发布INFO

See all Cloud Computing

历史摘要 · 未重新核验 · Akamai Security Research

#ddos #akamai #botnet

威胁情报2026-10-05 发布INFO

智利银行在勒索软件攻击后关闭所有分行

历史摘要 · 未重新核验 · CNCERT

#cncert #report #government

威胁情报2026-10-05 发布INFO

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

历史摘要 · 未重新核验 · CrowdStrike

#apt #crowdstrike #edr