2026-10-29 归档

今日共收录 3209 条安全情报,包含 2330 个 CVE,388 篇安全通告,以及 93 篇研究论文。

← 返回归档列表
漏洞预警2026-10-27 发布INFO

When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response without validating it. A malicious or compromised homeserver...

CVE-2026-118180

When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response wit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Clicking a news: or snews: link that referenced a message-ID made Thunderbird connect, without asking, to the host and port given in the link, even if it was not a configured ne...

CVE-2026-118179

Clicking a news: or snews: link that referenced a message-ID made Thunderbird connect, without asking, to the host and p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription URL to a file: URL. Thunderbird then read that location ...

CVE-2026-118178

A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thunderbird accepted calendar locations pointing to other serv...

CVE-2026-118177

When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thund

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially c...

CVE-2026-118176

Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the same folder into the message being co...

CVE-2026-118175

When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different me

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's content to offer importing the key. A sender could mark the ...

CVE-2026-118174

When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's con

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations with the server's con...

CVE-2026-115413

Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allo

历史摘要 · 未重新核验 · NVD

威胁情报2026-10-29 发布INFO

抢先加入AI时代顶尖安全团队!阿里云2027届实习生招聘来了!

抢先加入AI时代顶尖安全团队!阿里云2027届实习生招聘来了!

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-10-29 发布INFO

决赛直播|第四届阿里CTF安全挑战赛

决赛直播|第四届阿里CTF安全挑战赛

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-10-29 发布INFO

Control CenterManage your security and delivery services

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-10-29 发布INFO

See all Cybersecurity

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-10-29 发布INFO

Our Infrastructure

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-10-29 发布INFO

OpenClaw安全使用实践指南

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-10-29 发布INFO

关于OpenClaw安全应用的风险提示

关于OpenClaw安全应用的风险提示

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-10-29 发布INFO

关于“独狼”团伙大规模传播恶意程序的风险提示

关于“独狼”团伙大规模传播恶意程序的风险提示

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-10-29 发布INFO

Diicot挖矿组织近期攻击活动分析

Diicot挖矿组织近期攻击活动分析

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-10-29 发布INFO

通过个人信息保护合规审计服务认证的专业机构名单(第一批)

通过个人信息保护合规审计服务认证的专业机构名单(第一批)

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-10-29 发布INFO

关于国家授时中心遭受美国国家安全局网络攻击事件的技术分析报告

关于国家授时中心遭受美国国家安全局网络攻击事件的技术分析报告

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-10-29 发布INFO

第22届中国网络安全年会暨国家网络安全宣传周网络安全协同防御...

第22届中国网络安全年会暨国家网络安全宣传周网络安全协同防御...

历史摘要 · 未重新核验 · CNCERT