今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表CVE-2026-118309
Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to poten
CVE-2026-118310
Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to po
CVE-2026-118312
Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbi
CVE-2026-61567
AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLive.php` accepts an a
CVE-2026-61564
AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint `install/checkConfiguration.p
OpenAI says it won't reduce usage limits for the $100, $200, and $500 ChatGPT Pro plans, as well as Business Premium, an
A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting ba
Japan Airlines (JAL) has announced that a data breach at Amadeus's Passenger Service System exposed the data of about 92
Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party
A fake cryptocurrency trading app called Padre Terminal, previously available on the Apple App Store for iOS devices, ha
A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations
Microsoft has resolved a known issue that prevents non-admin users from connecting to devices via Remote Desktop when th
AI agents can control authenticated browsers, interact with corporate applications, and access sensitive data while appe
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux
U.S. law enforcement has seized the primary domain of Virtualine, a bulletproof hosting service advertised on cybercrime
26,400 credentials that developers left in public code on Gitee, a Chinese code-hosting service, still worked when a res
Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which
CVE-2026-113724
virtualenv: Deletion recovery can change a symlink target's mode
CVE-2026-97313
Specific RPZ configurations and query patterns may result in an unexpected exit
CVE-2026-96888
Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization