把散落的漏洞情报，收成一条时间线
今天
昨天
USN-8914-1: Google Guest Agent, Google OS Config Agent vulnerability
It was discovered that the Go x/net/idna package, vendored in Google Guest Agent and Google OS Config Agent, incorrectly accepted Punycode-encoded labels that decoded to ASCII-only labels when processing internationalized domain names. A remote attacker could possibly use this issue to bypass hostname-based access controls and escalate privileges.
VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1
CVE-2026-103521CVE-2026-103522rcexss
Overview Thelia versions 2.6.0 and 2.6.1 contain multiple vulnerabilities relating to file management, Smarty templating, module installation, and administrative workflows. Successful exploitation of these issues could enable remote code execution (RCE), server-side template injection (SSTI), stored and reflected cross-site scripting (XSS), unauthorized URL redirection, and other risks that expose both server-side and client-side attack surfaces. Description Thelia is an open-source e-commerce platform designed to provide merchants with customizable online storefronts, product management workflows, and administrative functionalities. It utilizes the Smarty template engine and provides administrators with broad control over templates, content, and modules. CVE-2026-103521 In Thelia v2.6.0, the document upload endpoint properly blocks the upload of executable file types, but the document update endpoint does not perform the same validation. An attacker with administrative Thelia permissions can exploit this vulnerability to upload arbitrary executable files, such as malicious PHP scripts, to achieve remote code execution on the underlying server. CVE-2026-103522 In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client-supplied MIME types. An attacker with administrative access can upload a PHP file disguised as an image to bypass validation and achieve remote code execution on the underlying server. CVE-2026-1
USN-8913-1: libx11 vulnerabilities
CVE-2026-88806CVE-2026-94283CVE-2026-94284CVE-2026-94285
Adam Bedard discovered that libx11 incorrectly handled certain XKB keyboard map replies. If a user were tricked into connecting to a malicious X server, a remote attacker could possibly use this issue to cause libx11 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-88806) It was discovered that libx11 incorrectly handled certain X Input Method (XIM) messages. If a user were tricked into connecting to a malicious X server, a remote attacker could possibly use these issues to cause libx11 to crash, resulting in a denial of service. (CVE-2026-94283, CVE-2026-94284) It was discovered that libx11 incorrectly handled converting certain multibyte text. An attacker could possibly use this issue to cause libx11 to crash, resulting in a denial of service. (CVE-2026-94285)
Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
The personal AI agents rollout is going about as smoothly as expected: Amazon now blocks Meta's Muse because it doesn't identify itself as a bot while browsing; Instinct keeps raising privacy concerns; and the horror stories from pretty much every personal AI agent keep piling up. Regardless, the tech world is mesmerized by the capabilities and potential of these services. Less than a year
Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports
Cryptocurrency hardware maker Ledger has temporarily paused sales of its products via CryptoBilis following reports of stolen funds linked to devices sold by the reseller. On Friday, the company said it was investigating reports of loss of funds from users in Southeast Asia who had purchased products from CryptoBilis. The incident is said to have resulted in losses totaling more than $86
Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forgery (SSRF) that could allow a remote attacker "to direct the appliance to issue requests on their
【AI 逆向专栏】某点 vmp w_tsfp 逆向分析
声明本文章中所有内容仅供学习交流使用，不用于其他任何目的，不提供完整代码，抓包内容、敏感网址、数据接口
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The
基于信息论安全密钥分发的高效安全联邦学习：一个医学影像案例研究
作者：Ivan Donà, Hans H. Brunner, Álvaro Troyano Olivas, Chi-Hang Fred Fung, Momtchil Peev, Giovanni Iacca 原文链接：https://arxiv.org/pdf/2610.06420v1 摘要 联邦学习（Federated Learning, FL）能够在不集中敏感数据的前提下，实现跨机构的模型协同...
SonicWall SMA 1000严重漏洞遭在野利用，补丁发布后已现135次攻击尝试
CVE-2026-102255 CVSS满分，补丁发布后现135次利用尝试 据观测，SonicWall Secur
CVE-2025-32433 漏洞复现分析报告：Erlang／OTP SSH 服务器预认证远程代码执行
报告日期: 2026-09-08测试环境: Windows Server 2012 R2 (win32 10.0.17763) 本地隔离环境，仅监听 127.0.0.1:2222性质: 本地授权漏洞复现（安全研究），未对任何未授权系统测试