ARCHIVE
按时间、分类、严重程度检索全部安全漏洞与安全信息。当前共收录 215 条记录。
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown. Orange Tsai of DEVCORE published…
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities…
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to re…
GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regul…
谷歌发布旗舰大模型Gemini 4 Carbon，网络安全能力大幅升级，漏洞修复效率超竞品10倍，幻觉、提示注入风险显著降低。
无需内存损坏漏洞！研究员靠纯逻辑漏洞链攻破Edge沙箱实现任意代码执行，斩获Pwn2Own17.5万美元奖金，微软已推送修复补丁。
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 (CVS…
A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the machi…
作者：Zhiyue Xu, Xukai Wang, Zhiyuan Huang, Mingjie Zhan, Jian Zhao, Xu-Yao Zhang 原文链接：https://arxiv.org/html/2610.28425v1 摘要 现代 LLM 智能体通过两条通道在会话之间持久化状态：一是被静默前置到系统提示中的长期记忆文件，二是无需用户输入即可唤醒智能体的定时任务。一次性的间接提示...
JeecgBoot 近期被披露存在“权限绕过 + SQL注入”组合漏洞（QVD-2026-56312 / LDYVUL-2026-00170236），CVSS 3.1 评分为 8.6（高危）。该漏洞允许未授权的远程攻击者绕过系统鉴权，通过 SQL 盲注窃取数据库敏感信息，甚至接管系统。
Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.
Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer co…
多个渠道披露的消息显示，公安部已成立无人机安全防控局。 多个渠道披露的消息显示，公安部已成立无人机安全防控局。据四川省公安厅官网10月22日消息，10月14日至15日，2026低空经济产业发展大会公安专场活动在四川自贡举行，公安部无人机安全防控局相关负责同志参加活动。 更早之前，9月10日，据法治日报报道，浙江省县级市玉环市成立全国首个县级低空安全保卫专业大队，补齐县级低空安全保卫力量，该报道同时提及，公安部已成立无人机安全防控局，省公…
