Posts of last 24 hours
Azuriom 是一款基于 Laravel 的开源游戏社区管理系统，在 Minecraft、Steam 等游戏服务器社区中被广泛使用。2026 年 6 月，该 CMS v1.2.11 之前版本被披露存在一个 CVSS 8.1 的高危漏洞（CVE-2026-54415），其后台 /admin/servers 路由缺少 can:admin.servers 权限中间件，导致仅有基础后台访问权限的用户即可
https://xz.aliyun.com/news/92416
最近笔者分析到一个名单类型的银狐，标题关键字是裁员补贴，依旧高活跃度，分析过程中发现这个样本中的代码混淆是有强有弱，同一天的样本可能会用多种混淆方式，本文会分享复原的思路
https://xz.aliyun.com/news/92425
A vulnerability labeled as critical has been found in Google mcp-toolbox up to 1.4.0. This issue affects some unknown processing of the file internal/sources/http/http.go of the component HTTP Client. Executing a manipulation can lead to server-side request forgery.
This vulnerability is tracked as CVE-2026-14540. The attack can be launched remotely. No exploit exists.
https://vuldb.com/vuln/384983
A vulnerability identified as critical has been detected in Google mcp-toolbox 1.3.0/1.4.0. This vulnerability affects unknown code of the component Direct HTTP API Tool Invocation Endpoint. Performing a manipulation results in improper authorization.
This vulnerability is identified as CVE-2026-14537. The attack can be initiated remotely. There is not any exploit available.
https://vuldb.com/vuln/384982
OpenAI GPT 5.6系列价格最高暴降80%OpenAI今天突然宣布GPT 5.6系列全面大降价。最快最便宜的模型Luna价格直接暴跌百分之八十。主打日常办公的Terra模型价格也下调了百分之二
https://buaq.net/go-432036.html
A vulnerability categorized as problematic has been discovered in Google mcp-toolbox up to 1.4.0. This affects an unknown part of the component BigQuery Execute-Sql Tool. Such manipulation leads to improper authorization.
This vulnerability is referenced as CVE-2026-14538. It is possible to launch the attack remotely. No exploit is available.
https://vuldb.com/vuln/384981
A vulnerability was found in Google mcp-toolbox up to 1.4.0. It has been rated as problematic. Affected by this issue is the function io.ReadAll of the component HTTP handler. This manipulation causes allocation of resources.
The identification of this vulnerability is CVE-2026-14539. It is possible to initiate the attack remotely. There is no exploit available.
https://vuldb.com/vuln/384980
往期推荐：2026年AI指数报告（八）5公众舆论概述公众对AI的看法如今受到一种核心矛盾的影响：一方面，人们
https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247500115&idx=1&sn=dfd6a13f520ebe03aa6d23fa751afe72