Aggregator

谷歌于周三宣布，谷歌相册正在获得一项全新的 “视频混剪”功能，可以在几秒内编辑和转换视频，今日开始面向特定国家符合条件的谷歌AI Plus、PRO 和 Ultra订阅用户逐步推出。该功能由Gemini

Submit #851214 / VDB-377111

Новая функция Cloud Rebuild уже тестируется.

本文记录了 HackTheBox Travel 靶机从外部枚举到 Root 权限获取的完整过程。攻击链起点来自虚拟主机与 WordPress 站点枚举，随后通过 blog-dev 的 .git 泄露恢复源码，定位到 awesome-rss 页面中的自定义 RSS 功能、SimplePie 缓存机制以及 Debug 信息泄露。进一步审计发现，受限 SSRF 可借助 Gopher 协议访问本地 Mem

7 个月，503 个测试用例，13 个检测插件，一个完全自研的 Web 漏洞扫描器。这篇文章不讲虚的，拆开聊聊 OOB 盲检测的三个后端设计（为什么做了 DNSLog + Interactsh + 自建 CallbackServer 三套）、API 挖掘的两阶段思路（Swagger 解析 + 路径 Fuzzing）、以及那个把我逼疯之后重写的差异引擎（加权打分 + 自动清洗，专门治动态页面误报）。

AI×Cybersecurity Challenge线上初赛re方向wp

服务端在未确认调用者身份的情况下，根据具体对象、租户、路由策略、请求方法或请求头动态生成 OPTIONS 响应。

VulnHuntr 深度拆解,从源码切入分析工具优缺点及改进方案

Submit #851192 / VDB-377110

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-07-09, 0 days ago. The vendor is given until 2026-11-06 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-07-09, 0 days ago. The vendor is given until 2026-11-06 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-07-09, 0 days ago. The vendor is given until 2026-11-06 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-07-09, 0 days ago. The vendor is given until 2026-11-06 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Ryota Shiga (GMO Flatt Security Inc.)' was reported to the affected vendor on: 2026-07-09, 0 days ago. The vendor is given until 2026-11-06 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

通过构造全量虚假对话历史，攻击者可利用大模型的无状态 API 与角色一致性缺陷在单次请求中污染上下文，从而诱导模型绕过安全策略执行敏感操作。

Submit #851191 / VDB-377109

Nginx ACL 绕过 SSRF php反序列化

The AI race is attracting hundreds of billions of dollars, but increasingly those investments are go

A homeowner walks into the basement and finds water everywhere.Within seconds, they grab their phone