-
1严重 漏洞预警 CVSS 9.3
CVE-2026-120281：A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects
A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buf…
100 热度 -
2严重 漏洞预警 CVSS 9.3
CVE-2026-120283：A vulnerability was identified in Linksys E8450 1.2.00.360516. Affecte
A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow…
100 热度 -
3严重 漏洞预警
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitati…
78 热度 -
4严重 漏洞预警
Java 反序列化从 Redis 开始Rce
**审计方法**：全局搜索 `readObject` → 逐层向上追踪调用链 → 定位 HTTP 入口 → 确认数据源为 Redis key → RCE
77 热度 -
5严重 漏洞预警
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization af…
70 热度 -
6严重 安全事件
黑客利用思科SD-WAN严重0Day漏洞，部署KeyDrift窃取加密密钥
国家背景黑客利用思科SD-WAN无认证满分0Day漏洞植入KeyDrift，窃取加密密钥入侵航天国防等机构，需立即打补丁排查。
67 热度 -
766 热度
-
8严重 漏洞预警
A quiet week in infosec
In this edition of the Threat Source newsletter, William explores how PHP has taken over the conversation, Node.js has joined in, but underneath it all, there are still good people doing good work.
64 热度 -
9严重 安全事件
【勒索预警】警惕！Weax勒索病毒改用国内IP发起0day攻击，某地产ERP遭加密，完整溯源复盘（附IOC）
近期，公安部网安局在护网专项工作中发布提醒文章，文中明确点名Sorry、Weax两个勒索家族近期攻击十分活跃，制造、商贸、医疗、教育、科技等行业的企业接连中招。作为长期奋战在一线的应急响应团队，我们对这个提醒的感受比大多数人都要直接，因为我们就身处这些案例的现场。
64 热度 -
10严重 安全事件
【勒索预警】快转发给身边同事，Sorry勒索病毒再度来袭，改名ths（附防护建议）
这是一篇快报，长话短说。 近日我们收到一起企业应急求助，上机排查后发现，受害服务器上的文件被批量加密，扩展名被追加为一个此前从未见过的新后缀 .ths，每个目录下均留有名为hello.txt 的勒索信。经过比对分析，我们确认这不是新家族，而是我们长期跟踪的 Sorry 勒索病毒（TellYouThePass 勒索家族）卷土重来，换了一个新名字继续作案。 考虑到该家族惯用 0day 发起攻击，传播速
64 热度 -
11严重 安全事件
IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public administration tied as the top-targeted industries.
63 热度 -
12严重 漏洞预警
某电子签署平台-验签漏洞研究
2025年爆出的某电子签署平台验签功能 /api/pdfverifier 漏洞还是比较经典的。本身是 Jar 包启动的Web服务，验签漏洞是 zip 文件上传然后ZipSlip 漏洞，在这个场景下进行RCE。本篇文章主要记录下签署平台在该ZipSlip漏洞下的RCE方式。
61 热度 -
13严重 漏洞预警
[remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
56 热度 -
14严重 漏洞预警
讲解一下这次PHP核弹级别漏洞的原理
作者：Laruence 原文链接：https://mp.weixin.qq.com/s/bB2EqImUlslJGCs7melQGw 这几天PHP圈很热闹，AI发现了一个核弹级别，隐藏了十几年的PHP的RCE漏洞，连日本首相都发X提醒大家注意。哈哈哈 本来昨天就想写一个分析的，不过考虑到可能被攻击者利用，就等到Patch出来以后，今天再发吧，本文以已经公开的攻击脚本POC为例，来解释，具体链接我就...
52 热度 -
15严重 漏洞预警
Widespread PHP Flaw May Cause Many Site Outages Today
Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full co…
52 热度 -
1652 热度
-
17高危 漏洞预警
CVE-2026-111357：Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-10…
45 热度 -
18高危 安全事件
Linux Kernel IPv4 TCP释放后重用漏洞(CVE-2026-98432)安全风险通告
攻击者可利用该漏洞通过网络触发内核内存损坏、信息泄露（绕过 KASLR）、拒绝服务，或在特定条件下（如 MPTCP...
45 热度 -
19高危 漏洞预警
CVE-2026-118527：Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. Th…
45 热度 -
2040 热度
-
21高危 安全事件
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually…
37 热度 -
22威胁情报
OneNote File Extraction, (Sun, Nov 1st)
Recently, I had to extract embedded files from a set of OneNote files (extension .one).
22 热度 -
23威胁情报
Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)
Wireshark Release Candidate 5.0.0 was published: soon we can expect a new major version of Wireshark.
18 热度 -
24技术分析
基于证据锚定的大语言模型辅助 Android 移动取证报告
作者：Madhab Chandra Das, Sajid Ahmed, Tasnia Tabassum, Qingzhong Liu 原文链接：https://arxiv.org/pdf/2610.26946v1 摘要 大语言模型可以辅助起草取证报告，但流畅的输出并不能保证证据层面的可靠性。本研究提出一个以证据为锚定的框架，用于在原子主张（atomic-claim）层面评估大语言模型辅助生成的 A...
14 热度 -
25严重 漏洞预警 CVSS 9.3
CVE-2026-120280：A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impa
A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument group_…
100 热度 -
26严重 漏洞预警 CVSS 9.3
CVE-2026-120279：A flaw has been found in WAVLINK WN536AX6-A V260507. The affected elem
A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead t…
100 热度 -
27严重 漏洞预警 CVSS 9.3
CVE-2026-120277：A security vulnerability has been detected in WAVLINK WN536AX6-A V2605
A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argu…
100 热度 -
28严重 漏洞预警 CVSS 9.3
CVE-2026-120276：A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. Th
A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument gr…
100 热度 -
29严重 漏洞预警 CVSS 10.0
CVE-2026-120338：Prefab UI's Generative UI sandbox runs caller-supplied Python inside P
Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. Fro…
100 热度 -
30严重 漏洞预警 CVSS 9.9
CVE-2026-120306：Beta9 turns each shell command in a tenant image definition into a Doc
Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker. The worker image sets BUILDAH_ISOLATION=chroot, and no buildah invocation passes --…
100 热度