Aggregator

2026年5月9日，深瞳漏洞实验室监测到一则FreeBSD组件存在命令执行漏洞的信息，漏洞编号：CVE-2026-42511，漏洞威胁等级：高危。

Под современным интерфейсом Windows 11 по-прежнему работает Win32, вокруг которого за десятилетия выросла огромная экосистема.

A vulnerability labeled as problematic has been found in go-git up to 5.17.x/6.0.0-alpha.1. The affected element is an unknown function. The manipulation results in insufficiently protected credentials. This vulnerability was named CVE-2026-41506. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.77/6.18.18/6.19.8. The affected element is the function remove_nh_grp_entry. The manipulation results in use after free. This vulnerability is known as CVE-2026-43374. Attacking locally is a requirement. No exploit is available. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.77/6.18.18/6.19.8. It has been classified as critical. Affected by this vulnerability is the function btrfs_map_block of the component btrfs. Performing a manipulation results in privilege escalation. This vulnerability is identified as CVE-2026-43393. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is recommended.

看雪安卓班・火热报名中

​源码仓库遭黑，勒索团伙晒图示威。

看雪论坛作者ID：zhuzhu_biu

美国反恐战略重大转向：网络攻击“武器化”成新威慑手段

欧盟数据管控日渐严格，跨境传输数据必须审慎

速修复

速修复

A vulnerability categorized as critical has been discovered in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of the file src/kernel.ts of the component System Command Handler. The manipulation results in os command injection. This vulnerability is cataloged as CVE-2026-8235. The attack must originate from the local network. Furthermore, there is an exploit available. It is best practice to apply a patch to resolve this issue.

欧洲心脏病学会等组织在《European Heart Journal》期刊上发表了一份临床共识声明：超加工食品会增加心血管死亡风险最高 65%，呼吁医生将食品加工视为一个风险因素，将其与营养素分离开来。超加工食品日益取代传统饮食，成为一大公共卫生问题。所谓超加工食品是用廉价工业原料、添加剂和新合成化合物组成的食品，通常营养价值较低甚至没有营养价值，它们通常高度加工含有可能对健康有害的添加剂。最近的证据表明，食品加工的程度和性质也是影响饮食与健康的重要因素。

Submit #809001 / VDB-362455

A vulnerability was found in EFM ipTIME A8004T 14.18.2. It has been rated as critical. This vulnerability affects the function formWifiBasicSet of the file /goform/WifiBasicSet. The manipulation of the argument security_5g leads to stack-based buffer overflow. This vulnerability is listed as CVE-2026-8234. The attack may be initiated remotely. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

Braintrust warned customers to rotate API keys after hackers breached an AWS account, exposing secrets tied to cloud-based AI models. AI observability startup Braintrust warned customers to rotate API keys after attackers gained unauthorized access to one of the company’s AWS accounts, potentially exposing secrets used to connect to cloud-based AI models. The company said […]

A vulnerability was found in Hikvision HikCentral Professional up to 3.0.1. It has been declared as critical. This affects an unknown part. Executing a manipulation can lead to improper access controls. This vulnerability is tracked as CVE-2026-1749. The attack can be launched remotely. No exploit exists.

A vulnerability was found in EZVIZ APP. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Legacy API Interface. Performing a manipulation results in information disclosure. This vulnerability is identified as CVE-2026-32683. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Hikvision DS-3E1310P-SI, DS-3E1318P-SI and DS-3E1326P-SI and classified as critical. Affected by this vulnerability is an unknown functionality of the component Packets Handler. Such manipulation leads to improper input validation. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is referenced as CVE-2026-3828. It is possible to launch the attack remotely. No exploit is available.