美国国土安全部人员数据遭窃取,CBP 与 ICE 大量特工信息泄露;CNNVD周报:新增3806个安全漏洞,PHP高危漏洞可导致远程代码执行| 牛览 不安全 4 days 11 hours ago 环境异常 当前环境异常,完成验证后即可继续访问。 去验证
群晖NAS遭大规模L0CK3D勒索病毒攻击 不安全 4 days 11 hours ago 群晖 NAS 遭"L0CK3D"勒索攻击:发生了什么,普通用户该怎么办?一、事件现状:攻击路径尚未确定目前确切的攻击入口还没有定论。社区里主要有几种推测:可能涉及
[0day-rubbish] NETGEAR RAX120 V1.2.5.18 authenticated SOAP InstallApp OS command injection to root-configured web-stack execution (6.8 Medium; conditionally 7.2 High with management exposure) 不安全 4 days 11 hours ago Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8) 不安全 4 days 11 hours ago Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] NUUO Crystal Server 3.19.0.85 unauthenticated upload.php PHP web-root write with fastcgi execution into server-side code execution as the web service account (9.8 Critical) 不安全 4 days 11 hours ago Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 scenario ping condition command injection through the auto-executing ping thread (7.2) 不安全 4 days 11 hours ago Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 IPsec tunnel address command injection through the route-management shell commands (7.2) 不安全 4 days 11 hours ago Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 command injection in the Executer program activation path (7.2) 不安全 4 days 11 hours ago Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
Re: CVE-2026-109618: PHP-CGI Pointer Underflow → Remote Code Execution (CVSS 9.2) 不安全 4 days 11 hours ago Full Disclosuremailing list archivesFrom: fulldisclosure
Maximised JSON Array Attacks -- "Let the Commas Hit the Floor" Proof of Concept 不安全 4 days 11 hours ago Full Disclosuremailing list archivesFrom: Daniel Owens via Fulldisclosure
SPECTER: Leaking Data from Air-Gapped Computers by Toggling USB Power States 不安全 4 days 12 hours ago October 29, 2026This Oc
让 Agent 读懂你的身体:数据处理篇 不安全 4 days 12 hours ago 在上一篇文章《让Agent读懂你的身体:数据获取篇》中,我花了很大的篇幅讲清楚了第一个问题:Agent怎样拿到数据。如果照着实践完,你大概率已经收获了一份存储了运动健康数据的SQLi