Aggregator

护网里最让人麻木的场景之一：目录扫描器跑了一整夜。

传谷歌正研发全新 Frozen v2 芯片；Windows 史上最大安全更新翻车；百度昆仑芯 M100 实物首次展出。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

京沪高铁与京沪铁路试点提前 60 天预约购票7 月 20 日，京沪高铁、京沪铁路试点新增火车票预约购票服务。京沪高铁、京沪铁路的沿线 19 个城市间 200 余趟列车可在铁路 12306 手机客户端预

A briefing for security leaders on separating vulnerability disclosure volume from exploitable risk in 2026.

A briefing for security leaders on separating vulnerability disclosure volume from exploitable risk in 2026.

A briefing for security leaders on separating vulnerability disclosure volume from exploitable risk in 2026.

With the new Intelligence Dashboard, pin any combination of CVEs, tags, countries, IPs, and GNQL queries into one persistent, always-current view.

Tor Browser 15.0.19 is now available from the Tor Browser download page and also from our distributi

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

从基础防护到安全运营，构建智慧医院安全体系。

A vulnerability classified as problematic has been found in Netty up to 4.1.135.Final/4.2.15.Final. Affected by this issue is some unknown functionality of the component SpdyFrameCodec. Performing a manipulation results in allocation of resources. This vulnerability is cataloged as CVE-2026-55833. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability described as problematic has been identified in Netty up to 4.1.135.Final/4.2.15.Final. Affected by this vulnerability is an unknown functionality of the component SPDY SETTINGS decoder. Such manipulation leads to heap-based buffer overflow. This vulnerability is listed as CVE-2026-55831. The attack may be performed from remote. There is no available exploit.

Cosmetics giant Estée Lauder is notifying employees of a data breach after hackers exploited a flaw in Oracle E-Business Suite that the company used for human resources (HR) operations. [...]

为在情报学领域深入落实国家人才培养战略，激发大学生对开源情报分析的热情，提升学生在数据采集、深度分析及情报应用

可借鉴之处：1.通过灵活采购机制降低非传统供应商进入国防市场的制度壁垒；2.允许防务科技企业同时开拓商业与政府市场，以商业收入平滑预算波动；3.建立清晰的软件采购政策框架（如XaaS试点、cATO机制），使SaaS和AI服务成为与硬件平台并列的标准采购品类。

A vulnerability marked as problematic has been reported in FreeRDP up to 3.27.x. Affected is an unknown function of the component CLI parser. This manipulation causes improper certificate validation. This vulnerability is tracked as CVE-2026-64624. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability labeled as critical has been found in AgenticMail. This impacts an unknown function of the component api/core. The manipulation results in improper input validation. This vulnerability is identified as CVE-2026-47255. The attack can be executed remotely. There is not any exploit available.

A vulnerability identified as critical has been detected in WWBN AVideo. This affects an unknown function of the component Encoder. The manipulation of the argument downloadURL leads to server-side request forgery. This vulnerability is referenced as CVE-2026-64626. Remote exploitation of the attack is possible. No exploit is available.