PingSec 安全日报

🚨 最新安全公告 🟠 GHSA-rh62-j648-g5qc [high] (2026-07-02) Recce server has unauthenticated SQL execution that allows local file read/write throu...

🚨 最新安全公告 ⚪ GHSA-9c3v-684m-579c [medium] (2026-07-01) OpenClaw MCP SSE redirects could forward Authorization headers 详情 🟠 GHSA-6gr2-qh89-h...

🚨 最新安全公告 🟠 GHSA-j35x-w4gj-pf7w [high] (2026-06-30) Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles 详情 🟢 GHSA-8j...

🚨 最新安全公告 🟠 GHSA-q2m9-6jp9-c6mc [high] (2026-06-29) Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query 详情 ⚪ GHSA-4v2w-...

🚨 最新安全公告 🟠 GHSA-qrv3-253h-g69c [high] (2026-06-27) pnpm: Path traversal in configDependencies env lockfile allows symlink creation outsid...

🚨 最新安全公告 🟠 GHSA-qrv3-253h-g69c [high] (2026-06-27) pnpm: Path traversal in configDependencies env lockfile allows symlink creation outsid...

🚨 最新安全公告 ⚪ GHSA-ww5p-j6cj-6mqq [medium] (2026-06-26) Nezha Dashboard: DDNS and Notification credential exposure via unredacted list API 详...

🚨 最新安全公告 🔴 GHSA-x527-x647-q7gg [critical] (2026-06-25) golang.org/x/crypto/ssh: Invoking VerifiedPublicKeyCallback permissions skip enfor...

🚨 最新安全公告 ⚪ GHSA-prj9-97mp-mwh2 [medium] (2026-06-24) OliveTin has Unvalidated ot_-prefixed Arguments that Bypass Input Filtering 详情 🟢 GHS...

🚨 最新安全公告 🟠 GHSA-pwpj-p52h-q484 [high] (2026-06-23) Snipe-IT API Vulnerable to Cross-Tenant Accessory Injection 详情 🟢 GHSA-6mmj-jhqj-6c6q [...

🚨 最新安全公告 🟠 GHSA-p9f5-h3rx-j5qw [high] (2026-06-22) Gogs Missing Authorization in Attachment Download 详情 🟠 GHSA-jq8v-rmf6-65jw [high] (202...

🚨 最新安全公告 🟠 GHSA-869j-r97x-hx2g [high] (2026-06-19) Anki's local HTTP server does not sufficiently validate requests 详情 ⚪ GHSA-jv2j-mqmw-x...

🚨 最新安全公告 🟠 GHSA-869j-r97x-hx2g [high] (2026-06-19) Anki's local HTTP server does not sufficiently validate requests 详情 ⚪ GHSA-jv2j-mqmw-x...

安全日报 2026-06-20 — PingSec 安全日报，网络安全资讯博客。🚨 最新安全公告 🟠 GHSA-869j-r97x-hx2g [high] (2026-06-19) Anki's local HTTP server does not sufficiently validate requests 详情

安全日报 2026-06-19 — PingSec 安全日报，网络安全资讯博客。📡 数据来源: GitHub Security Advisories · 由 PingSec 安全日报自动生成

安全日报 2026-06-18 — PingSec 安全日报，网络安全资讯博客。🚨 最新安全公告 ⚪ GHSA-hhpq-7wg4-36jm [medium] (2026-06-17) CakePHP Authentication: Open redirect weakness via backslash bypas

安全日报 2026-06-10 — PingSec 安全日报，网络安全资讯博客。🚨 最新安全公告 🔴 GHSA-jvc5-6g7q-c843 [critical] (2026-06-09) Pheditor: OS Command Injection in terminal handler via unsanitiz

安全日报 2026-05-27 — PingSec 安全日报，网络安全资讯博客。今日重点：LiteSpeed cPanel 插件 CVSS 10.0 满分 RCE | Linux 内核 9 年老漏洞可窃取 SSH 密钥 | Windows Shell 欺骗漏洞遭俄黑客组织利用 🔴 头条一：LiteSpeed cPan

安全日报 2026-05-26 — PingSec 安全日报，网络安全资讯博客。🚨 最新安全公告 GHSA-hvv7-hfrh-7gxj [medium] — Nezha Monitoring: Nezha WebSocket server stream discloses cross-tenant server te

安全日报 2026-05-25 — PingSec 安全日报，网络安全资讯博客。🚨 最新安全公告 GHSA-hvv7-hfrh-7gxj [medium] — Nezha Monitoring: Nezha WebSocket server stream discloses cross-tenant server te