-
1严重 漏洞预警 CVSS 9.3
CVE-2026-120283：A vulnerability was identified in Linksys E8450 1.2.00.360516. Affecte
A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow…
100 热度 -
2严重 漏洞预警 CVSS 9.3
CVE-2026-120281：A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects
A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buf…
100 热度 -
3严重 漏洞预警
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitati…
78 热度 -
4严重 漏洞预警
Java 反序列化从 Redis 开始Rce
**审计方法**：全局搜索 `readObject` → 逐层向上追踪调用链 → 定位 HTTP 入口 → 确认数据源为 Redis key → RCE
77 热度 -
5严重 漏洞预警
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization af…
70 热度 -
6严重 安全事件
黑客利用思科SD-WAN严重0Day漏洞，部署KeyDrift窃取加密密钥
国家背景黑客利用思科SD-WAN无认证满分0Day漏洞植入KeyDrift，窃取加密密钥入侵航天国防等机构，需立即打补丁排查。
67 热度 -
766 热度
-
8严重 漏洞预警
A quiet week in infosec
In this edition of the Threat Source newsletter, William explores how PHP has taken over the conversation, Node.js has joined in, but underneath it all, there are still good people doing good work.
64 热度 -
9严重 安全事件
IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public administration tied as the top-targeted industries.
63 热度 -
10严重 漏洞预警
某电子签署平台-验签漏洞研究
2025年爆出的某电子签署平台验签功能 /api/pdfverifier 漏洞还是比较经典的。本身是 Jar 包启动的Web服务，验签漏洞是 zip 文件上传然后ZipSlip 漏洞，在这个场景下进行RCE。本篇文章主要记录下签署平台在该ZipSlip漏洞下的RCE方式。
61 热度 -
11高危 安全事件
Linux Kernel IPv4 TCP释放后重用漏洞(CVE-2026-98432)安全风险通告
攻击者可利用该漏洞通过网络触发内核内存损坏、信息泄露（绕过 KASLR）、拒绝服务，或在特定条件下（如 MPTCP...
45 热度 -
12高危 漏洞预警
CVE-2026-118527：Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. Th…
45 热度 -
13高危 漏洞预警
CVE-2026-111357：Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-10…
45 热度 -
1440 热度
-
15威胁情报
OneNote File Extraction, (Sun, Nov 1st)
Recently, I had to extract embedded files from a set of OneNote files (extension .one).
22 热度 -
16威胁情报
Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)
Wireshark Release Candidate 5.0.0 was published: soon we can expect a new major version of Wireshark.
18 热度 -
1714 热度
-
18技术分析
基于证据锚定的大语言模型辅助 Android 移动取证报告
作者：Madhab Chandra Das, Sajid Ahmed, Tasnia Tabassum, Qingzhong Liu 原文链接：https://arxiv.org/pdf/2610.26946v1 摘要 大语言模型可以辅助起草取证报告，但流畅的输出并不能保证证据层面的可靠性。本研究提出一个以证据为锚定的框架，用于在原子主张（atomic-claim）层面评估大语言模型辅助生成的 A...
14 热度 -
19技术分析
攻击者离场之后：面向 LLM 智能体的跨会话残留攻击基准评测
作者：Zhiyue Xu, Xukai Wang, Zhiyuan Huang, Mingjie Zhan, Jian Zhao, Xu-Yao Zhang 原文链接：https://arxiv.org/html/2610.28425v1 摘要 现代 LLM 智能体通过两条通道在会话之间持久化状态：一是被静默前置到系统提示中的长期记忆文件，二是无需用户输入即可唤醒智能体的定时任务。一次性的间接提示...
6 热度 -
200 热度
-
21严重 漏洞预警 CVSS 9.3
CVE-2026-120280：A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impa
A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument group_…
100 热度 -
22严重 漏洞预警 CVSS 9.3
CVE-2026-120279：A flaw has been found in WAVLINK WN536AX6-A V260507. The affected elem
A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead t…
100 热度 -
23严重 漏洞预警 CVSS 9.3
CVE-2026-120277：A security vulnerability has been detected in WAVLINK WN536AX6-A V2605
A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argu…
100 热度 -
24严重 漏洞预警 CVSS 9.3
CVE-2026-120276：A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. Th
A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument gr…
100 热度 -
25严重 漏洞预警 CVSS 10.0
CVE-2026-120338：Prefab UI's Generative UI sandbox runs caller-supplied Python inside P
Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. Fro…
100 热度 -
26严重 漏洞预警 CVSS 9.9
CVE-2026-120307：The Beta9 worker serves the sandbox file API from outside the containe
The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's container path into a worker path. If the unresolved path starts with a mount destination, includin…
100 热度 -
27严重 漏洞预警 CVSS 9.9
CVE-2026-120308：A Beta9 tenant can attach a volume when deploying a function, endpoint
A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by joining the shared volumes root, the workspace name, and the volume identifier from the stub conf…
100 热度 -
28严重 漏洞预警 CVSS 9.9
CVE-2026-120306：Beta9 turns each shell command in a tenant image definition into a Doc
Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker. The worker image sets BUILDAH_ISOLATION=chroot, and no buildah invocation passes --…
100 热度 -
29严重 漏洞预警 CVSS 9.3
CVE-2026-62048：Improper Neutralization of Special Elements used in an SQL Command ('S
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6.
99 热度 -
30严重 漏洞预警 CVSS 9.3
CVE-2026-120198：A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affec
A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection…
97 热度