Category

資安雷達

CVE、Supply Chain、重大資安事件

資安雷達

2026-07-19 — 7-Zip XZ 堆積溢位、OpenSSL HollowByte 記憶體膨脹、llama-server CSRF 提示詞注入三則資安揭露

primary=https://www.openwall.com/lists/oss-security/2026/07/17/12 primary=https://www.zerodayinitiative.com/advisories/ZDI-26-444/ primary=https://www.openwall.com/lists/oss-security/2026/07/18/1 primary=https://github.com/openssl/openssl/pull/30792 primary=https://www.openwall.com/lists/oss-security/2026/07/18/2 primary=https://github.com/ggml-org/llama.cpp/issues/25790

1 min Read →
資安雷達

2026-07-09 — Linux 核心接連曝出 rtmutex 堆疊 UAF 與 epoll 競爭條件兩起本地提權漏洞,AI 代理工具 Serena 則因儀表板零驗證釀成 DNS 重綁定連遠端執行風險

primary=https://www.openwall.com/lists/oss-security/2026/07/08/12 primary=https://nvd.nist.gov/vuln/detail/CVE-2026-43499 primary=https://www.openwall.com/lists/oss-security/2026/07/08/13 primary=https://nvd.nist.gov/vuln/detail/CVE-2026-46242 primary=https://github.com/advisories/GHSA-37h2-6p4f-mp3q primary=https://github.com/oraios/serena/commit/016ccbe

2 min Read →
資安雷達

2026-07-03 — Steeltoe 與 SimpleSAMLphp 齊爆多則 CVE,Apache HttpComponents HTTP/2 解碼器現記憶體耗盡漏洞

primary=https://github.com/advisories/GHSA-4j9m-h44m-2hv8 primary=https://github.com/advisories/GHSA-rxrh-4j9h-xgg9 primary=https://github.com/advisories/GHSA-7fqc-p256-7pwj primary=https://github.com/advisories/GHSA-227r-jm2g-7cp4 primary=https://github.com/advisories/GHSA-q62h-354g-5r85 primary=https://github.com/advisories/GHSA-j8ph-6fxj-g533 primary=https://github.com/advisories/GHSA-58f6-6rj2-3v8r primary=https://github.com/advisories/GHSA-q8r6-xj3f-wrrm primary=https://github.com/advisories/GHSA-5cjr-mxj5-wmrx primary=https://github.com/advisories/GHSA-6929-8p9f-26jx primary=https://www.openwall.com/lists/oss-security/2026/07/01/3

3 min Read →
資安雷達

2026-06-30 — Apache Tomcat CVE-2026-55957/55956/55955 三重漏洞、OpenAM CVE-2026-47424 Groovy Sandbox RCE、Chrome CVE-2026-6307 V8 雙邊界 Sandbox 逃逸

primary=https://oss-security.openwall.org/lists/oss-security/2026/06/29/26 primary=https://oss-security.openwall.org/lists/oss-security/2026/06/29/25 primary=https://oss-security.openwall.org/lists/oss-security/2026/06/29/24 primary=https://github.com/advisories/GHSA-69j4-qvqr-hpw3 primary=https://nebusec.ai/research/v8-cve-2026-6307-writeup/

2 min Read →
資安雷達

2026-06-28 — Grafana TanStack 供應鏈勒索事後檢討、pnpm 路徑穿越雙漏洞(CVE-2026-50015/50016)、Lemur SSRF+IDOR 漏洞鏈(CVE-2026-55166)

primary=https://grafana.com/blog/post-incident-review-for-tanstack-npm-supply-chain-ransom-incident/ primary=https://dailycve.com/pnpm-path-traversal-cve-2026-50015-critical-dc-jun2026-715/ primary=https://dailycve.com/pnpm-path-traversal-via-transitive-dependency-alias-cve-2026-50016-high-dc-jun2026-710/ primary=https://github.com/Netflix/lemur/security/advisories/GHSA-v2wp-frmc-5q3v

2 min Read →