New in Falcon Cloud Security: Third-Party App Insights and AI-Enhanced Remediation
New in Falcon Cloud Security: Third-Party App Insights and AI-Enhanced Remediation
2026-10-28 归档
今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Solving the Continuous Authorization Conundrum
Solving the Continuous Authorization Conundrum
Introducing the Cloudflare PHP Capture the Flag challenge
We are launching a PHP Capture the Flag challenge integrated with our Bug Bounty program to test our WAF protections. Se
Japan's GMO urges customers to shut down PCs amid ransomware threat
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat a
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
CVE-2026-109618
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently
rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share
## Summary The client records the server-selected key-exchange group per server name when it processes the ServerHello,
无人机开源飞控 PX4-Autopilot堆栈溢出漏洞 CVE-2025-15150
CVE-2025-15150
无人机开源飞控 PX4-Autopilot堆栈溢出漏洞 CVE-2025-15150
MongoDB内存泄漏 CVE-2025-14847(MongoBleed)
CVE-2025-14847
MongoDB内存泄漏 CVE-2025-14847(MongoBleed)
1Panel 代理证书验证绕过导致任意命令执行漏洞(CVE-2025-54424)
CVE-2025-54424
1Panel 代理证书验证绕过导致任意命令执行漏洞(CVE-2025-54424)
ModelContext Inspector 未授权访问漏洞(CVE-2025-49596)
CVE-2025-49596
ModelContext Inspector 未授权访问漏洞(CVE-2025-49596)
llamaindex SQL 注入漏洞(CVE-2025-1750)
CVE-2025-1750
llamaindex SQL 注入漏洞(CVE-2025-1750)
Screen 本地权限提升漏洞(CVE-2025-23395)
CVE-2025-23395
Screen 本地权限提升漏洞(CVE-2025-23395)
Zabbix认证后SQL注入漏洞(CVE-2024-42327)
CVE-2024-42327
Zabbix认证后SQL注入漏洞(CVE-2024-42327)
ProjectSend认证绕过漏洞(CVE-2024-11680)
CVE-2024-11680
ProjectSend认证绕过漏洞(CVE-2024-11680)
PyTorch库RPC框架反序列化RCE漏洞(CVE-2024-48063)
CVE-2024-48063
PyTorch库RPC框架反序列化RCE漏洞(CVE-2024-48063)
Grafana认证后DuckDB-SQL注入漏洞(CVE-2024-9264)
CVE-2024-9264
Grafana认证后DuckDB-SQL注入漏洞(CVE-2024-9264)
SPIP BigUp Unauthenticated RCE(CVE-2024-8517)
CVE-2024-8517
SPIP BigUp Unauthenticated RCE(CVE-2024-8517)
Rejetto HFS 远程命令执行漏洞(CVE-2024-39943)
CVE-2024-39943
Rejetto HFS 远程命令执行漏洞(CVE-2024-39943)
Apache HugeGraph-Server Command Execution In Gremlin（CVE-2024-27348）
CVE-2024-27348
Apache HugeGraph-Server Command Execution In Gremlin（CVE-2024-27348）
Zabbix 后台延时注入(CVE-2024-22120)
CVE-2024-22120
Zabbix 后台延时注入(CVE-2024-22120)