Posts of last few hours

CVE-2026-20355
Currently trending CVE - Hype Score: 8 - Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to ...
https://cvemon.intruder.io/cves/CVE-2026-20355
CVE-2026-20279
Currently trending CVE - Hype Score: 35 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered ...
https://cvemon.intruder.io/cves/CVE-2026-20279
CVE-2026-20274
Currently trending CVE - Hype Score: 35 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered ...
https://cvemon.intruder.io/cves/CVE-2026-20274
CVE-2026-12555
Currently trending CVE - Hype Score: 9 - Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.
https://cvemon.intruder.io/cves/CVE-2026-12555
CVE-2026-12556
Currently trending CVE - Hype Score: 9 - Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.
https://cvemon.intruder.io/cves/CVE-2026-12556
CVE-2026-12554
Currently trending CVE - Hype Score: 9 - Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.
https://cvemon.intruder.io/cves/CVE-2026-12554
CVE-2026-83549
Currently trending CVE - Hype Score: 5 - Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated ...
https://cvemon.intruder.io/cves/CVE-2026-83549
CVE-2026-83548
Currently trending CVE - Hype Score: 5 - A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and ...
https://cvemon.intruder.io/cves/CVE-2026-83548
CVE-2025-31201
Currently trending CVE - Hype Score: 19 - This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of ...
https://cvemon.intruder.io/cves/CVE-2025-31201
CVE-2025-31200
Currently trending CVE - Hype Score: 19 - A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code ...
https://cvemon.intruder.io/cves/CVE-2025-31200
U.S. CISA adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Google Chromium V8 flaw, tracked as CVE-2026-85046 (CVSS score of 8,8), to its Known Exploited Vulnerabilities (KEV) catalog. This week, Google released a Chrome security update fixing 12 […]
https://securityaffairs.com/198455/security/u-s-cisa-adds-google-chromium-v8-flaw-to-its-known-exploited-vulnerabilities-catalog-2.html
从0到1的XSS漏洞学习
本文是对 XSS（Cross-Site Scripting，跨站脚本攻击）的二次回顾与学习总结，主要围绕 XSS 的基本原理、反射型/存储型/DOM 型分类、常见危害以及漏洞探测展开。在此基础上，重点整理了 XSS 中常见的过滤绕过思路，包括双写、大小写、空格、闭合、注释、HTML 实体、事件处理器、伪协议、SVG 等技巧，并结合具体代码分析其产生原因与适用场景。文章最后以 XSS-labs 为主
https://xz.aliyun.com/news/92742
记一次曲折的渗透测试经历
通过 Git 源码泄露获取 Gitea 管理员凭证，利用 CVE-2026-60004 漏洞获得初始 Shell。随后通过劫持全局可写的 PHP-FPM Socket 向 Root 定时脚本注入命令，最终成功提权至 Root。
https://xz.aliyun.com/news/92744
Zygote 注入技术详解及代码分析
Zygote 是 Android 系统中所有应用进程的"祖先"，通过 fork() 机制派生新进程。向 Zygote 注入模块 后，后续所有由 Zygote 生成（fork）出的应用进程都会继承该模块，实现向派生模块注入的效果。
https://xz.aliyun.com/news/92747
JeecgBoot 未授权权限绕过 + SQL 注入组合漏洞分析与复现
本文分析并复现了 JeecgBoot 低代码平台（≤ 3.9.3）的未授权权限绕过与 SQL 注入组合漏洞。攻击链由三个缺陷叠加而成：其一，Shiro 过滤链中 /**/*.js 等静态资源后缀匿名放行规则与 Spring MVC 路由解析存在差异，攻击者在 /sys/dict/getDictItems/* 接口后附加 .js 即可绕过 JWT 认证，匿名访问敏感数据接口；其二，字典查询四段式编码
https://xz.aliyun.com/news/92753
AWDP赛制PWN速览
结合第十九届ciscn的awdp赛制
https://xz.aliyun.com/news/92763
重复键如何绕开模型权重审计
Safetensors 的文件头保存张量名、dtype、shape 与 data_offsets。格式说明禁止重复键，并明确提示并非每个解析器都会遵守这一限制。
https://xz.aliyun.com/news/92700
【AI安全】RAG 入库链中的跨视图语义漂移与上下文污染
人看到的安全文档，对 RAG 来说不一定安全。那么当知识在 Parser、Chunk、Retrieval 之间不断被重新解释和组织时，它原本的语义和安全属性还能不能完整保留下来？
https://xz.aliyun.com/news/92691
AI辅助Teamcity RCE、新攻击面挖掘
最近漏洞爆发比较频繁（尤其java漏洞），于是想将之前的代码审计工具结合AI去实现做自动化漏洞挖掘以及gadget链路寻找（进行一次AI代码审计的探索）。
https://xz.aliyun.com/news/92708
一次宝塔挂马应急响应，挖出一个未公开的黑产 SEO 团伙：从 nginx sub_filter 劫持到蜘蛛池生意
2026 年 8 月16日，笔者在处置一起服务器入侵事件时，发现攻击者通过篡改宝塔面板 nginx 全局配置（16 个 `enable-php-*.conf`）注入 `sub_filter` 恶意指令，对全站实施"仅移动端 + 搜索引擎来源 + 中国时区"的精准流量劫持。沿恶意 JS 的 C2 基础设施逐层追踪，最终挖出一个**集"蜘蛛池软件销售 + 网站流量劫持服务"于一体的黑产 SEO 团伙*
https://xz.aliyun.com/news/92709

Managed ad