Category

資安雷達

CVE、Supply Chain、重大資安事件

資安雷達

2026-09-05 — CodeWhale 九項 AI 代理漏洞、SiYuan 發布權限繞過八連發、vLLM 修補被競爭條件繞過

primary=https://github.com/advisories/GHSA-gx45-xrj5-g6c4 primary=https://github.com/advisories/GHSA-wrj3-vj8c-784f primary=https://github.com/advisories/GHSA-c6mw-8xh8-gpq6 primary=https://github.com/advisories/GHSA-6v2g-fpxh-pmmh primary=https://github.com/advisories/GHSA-h539-c7r8-3xq4 primary=https://github.com/advisories/GHSA-7j5w-7r7x-9v27 primary=https://github.com/advisories/GHSA-g29h-pfmp-qp9r primary=https://github.com/advisories/GHSA-62f5-cp2p-vq95 primary=https://github.com/advisories/GHSA-w7wx-5q49-r59w primary=https://github.com/advisories/GHSA-mp7r-57w4-5qm3 primary=https://github.com/advisories/GHSA-h4v5-crx2-3cv4 primary=https://github.com/advisories/GHSA-h6w7-xxcf-w2mq primary=https://github.com/advisories/GHSA-34fj-mwm6-fjfg primary=https://github.com/advisories/GHSA-fgmr-7w36-9qfq primary=https://github.com/advisories/GHSA-f2rw-w22v-54vh primary=https://github.com/advisories/GHSA-mfrj-v65r-979c primary=https://github.com/advisories/GHSA-5w7r-f4cg-rqq7 primary=https://github.com/advisories/GHSA-pr7f-p5mw-fc87 primary=https://github.com/advisories/GHSA-48jh-3gj7-fg8v primary=https://github.com/advisories/GHSA-hwrm-c4cx-rf4j primary=https://github.com/advisories/GHSA-8737-qx52-hjff

2 min Read →
資安雷達

2026-09-04 — SiYuan 一次揭露 18 份公告、Apache Allura 四個 CVE、OpenStack Glance 再爆 SSRF

primary=https://github.com/advisories/GHSA-fph3-ghq9-vw66 primary=https://github.com/advisories/GHSA-5fhr-f75j-8wr9 primary=https://www.openwall.com/lists/oss-security/2026/09/03/4 primary=https://www.openwall.com/lists/oss-security/2026/09/03/3 primary=https://www.openwall.com/lists/oss-security/2026/09/03/2 primary=https://security.openstack.org/ossa/OSSA-2026-038.html

2 min Read →
資安雷達

2026-09-03 — Omnigent AI 代理框架爆四漏洞可串成認證後 RCE,curl 8.22.0 同步修十個 CVE、golang.org/x/crypto 補強 SSH 阻斷服務漏洞

primary=https://oss-security.openwall.org/lists/oss-security/2026/09/02/5 primary=https://oss-security.openwall.org/lists/oss-security/2026/09/02/2 primary=https://github.com/advisories/GHSA-756x-9hf6-q4h4 primary=https://github.com/advisories/GHSA-jrrm-9hc7-2v3h primary=https://github.com/advisories/GHSA-7mqg-cx4g-x2rf

2 min Read →
資安雷達

2026-09-02 — FreeRDP 五漏洞串成免驗證 RCE、gRPC-Go HTTP/2 碎片攻擊、MLflow pickle 防線失效

primary=https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x7v6-xfx3-52j6 primary=https://github.com/FreeRDP/FreeRDP/releases/tag/3.31.0 primary=https://openwall.com/lists/oss-security/2026/09/01/2 primary=https://github.com/advisories/GHSA-vp52-pcj8-j9qc primary=https://github.com/grpc/grpc-go/releases/tag/v1.83.1 primary=https://github.com/advisories/GHSA-gqvg-gmmx-x4hm primary=https://github.com/mlflow/mlflow/pull/24686

2 min Read →
資安雷達

2026-08-31 — Apache Wicket 三個 CVE 同日曝光、Apache Shiro 現伺服器端請求重導、QubesOS QSB-118 揭露 dom0 任意程式碼執行

primary=https://www.openwall.com/lists/oss-security/2026/08/30/5 primary=https://www.openwall.com/lists/oss-security/2026/08/30/4 primary=https://www.openwall.com/lists/oss-security/2026/08/30/3 primary=https://www.openwall.com/lists/oss-security/2026/08/30/2 primary=https://www.qubes-os.org/news/2026/08/29/qsb-118/

2 min Read →
資安雷達

2026-08-27 — Tomcat 單日修補 9 個 CVE、Trail of Bits 揭露 VM 難擋 AI 攻擊代理、pantheon-agents 遭植入竊資木馬

primary=https://www.openwall.com/lists/oss-security/2026/08/26/1 primary=https://www.openwall.com/lists/oss-security/2026/08/26/2 primary=https://www.openwall.com/lists/oss-security/2026/08/26/3 primary=https://www.openwall.com/lists/oss-security/2026/08/26/4 primary=https://www.openwall.com/lists/oss-security/2026/08/26/5 primary=https://www.openwall.com/lists/oss-security/2026/08/26/6 primary=https://www.openwall.com/lists/oss-security/2026/08/26/7 primary=https://www.openwall.com/lists/oss-security/2026/08/26/8 primary=https://www.openwall.com/lists/oss-security/2026/08/26/9 primary=https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyber-capable-agents/ primary=https://github.com/advisories/GHSA-93qj-5q5v-3c2h

2 min Read →