Aggregator

千问等 AI 工具，正在成为高考志愿填报的起点。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

A vulnerability classified as critical has been found in wolfSSL up to 5.9.1. This affects an unknown part of the component SNI/ALPN. Performing a manipulation results in improper authentication. This vulnerability is cataloged as CVE-2026-11703. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability described as critical has been identified in Cacti up to 1.2.30. Affected by this issue is the function cacti_unserialize of the file managers.php. Such manipulation of the argument selected_items leads to sql injection. This vulnerability is listed as CVE-2026-40083. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in Cacti up to 1.2.30. Affected by this vulnerability is an unknown functionality. This manipulation causes improper verification of cryptographic signature. This vulnerability is tracked as CVE-2026-40941. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in Cacti up to 1.2.30. Affected is an unknown function in the library lib/html_reports.php. The manipulation of the argument Save results in path traversal. This vulnerability is identified as CVE-2026-40084. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability identified as critical has been detected in Cacti up to 1.2.30. This impacts the function session_regenerate_id of the file auth_login.php. The manipulation of the argument SESS_USER_ID leads to session fixiation. This vulnerability is referenced as CVE-2026-40082. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

Вот так самую горячую проблему электроники решили самые древние существа на планете.

SpaceX的投资者、Andreessen Horowitz LLC 普通合伙人戴维·乔治表示，新型星舰火箭的“快速可重复使用性”对于实现埃隆·马斯克关于轨道数据中心以扩展AI计算能力的押注至关重要。

一种此前未被记录的基于 Rust 的 macOS 植入程序和信息窃取器被发现嵌入了提示注入载荷，旨在欺骗恶意软件分析人员的人工智能（AI）工具，使其中止或拒绝对该恶意软件进行分析。 由于这种欺骗行为，该恶意软件被命名为 Gaslight。评估认为，该工具极有可能是与朝鲜有关联的威胁行为者的作品。 SentinelOne 研究员 Phil Stokes 在一份技术报告中表示：其最显著的特征是嵌入了一...

error code: 1003

Healthcare practices run on a chain of outside vendors. An EMR system holds clinical records, a billing platform processes claims, a telehealth tool supports remote visits, and a cloud provider stores data. Every one of those connections gives an outside company a path into the practice, and any one of them can break. That is what happened across the sector over the past year. According to Omega Systems’ 2026 Healthcare IT Landscape Report, the large … More →

The post Healthcare leaders see a fatal cyber incident as inevitable appeared first on Help Net Security.

2026年6月26日 13:00软件资讯00.80K

日本電気株式会社が提供するExpressUpdate Agent for Windowsには、内部で使用している名前付きパイプのアクセス制御設定に不備が存在します。

A CVSS score 7.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L severity vulnerability discovered by 'Taha Siddiqi (@_atomiz_) of TrendAI Research' was reported to the affected vendor on: 2026-06-26, 5 days ago. The vendor is given until 2026-10-24 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.3 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L severity vulnerability discovered by 'Taha Siddiqi (@_atomiz_) of TrendAI Research' was reported to the affected vendor on: 2026-06-26, 5 days ago. The vendor is given until 2026-10-24 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.3 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L severity vulnerability discovered by 'Taha Siddiqi (@_atomiz_) of TrendAI Research' was reported to the affected vendor on: 2026-06-26, 5 days ago. The vendor is given until 2026-10-24 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Taha Siddiqi (@_atomiz_) of TrendAI Research' was reported to the affected vendor on: 2026-06-26, 5 days ago. The vendor is given until 2026-10-24 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Brandon Evans of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-06-26, 5 days ago. The vendor is given until 2026-10-24 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.