安全资讯归档（2026-04-05）

• 2Libra 社区 - 今日热议
  • 今日关于能源供应链的三条新闻
• Daring Fireball
  • Material Security
• defend.network – Daily Threat Briefings
  • Daily Threat Briefing ��� April 5, 2026
• Hacker News: Front Page
  • Iguanaworks has closed down. USB Infrared hardware open source maker
• InfoSec Write-ups - Medium
  • Inside SC-200: What It Takes to Become a Microsoft Security Analyst
  • The Invisible Threat: Detecting Early-Stage Phishing & Scam Campaigns
• Security Affairs
  • Image or Malware? Read until the end and answer in comments :)
  • Qilin ransomware group claims the hack of German political party Die Linke
  • SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 91
  • Security Affairs newsletter Round 571 by Pierluigi Paganini – INTERNATIONAL EDITION
  • U.S. CISA adds a flaw in TrueConf Client to its Known Exploited Vulnerabilities catalog
• Sploitus.com Exploits RSS Feed
  • Exploit for CVE-2024-23700 exploit
  • Exploit for Deserialization of Untrusted Data in Facebook React exploit
  • Exploit for Download of Code Without Integrity Check in Trueconf exploit
  • Exploit for Download of Code Without Integrity Check in Trueconf exploit
  • Exploit for Improper Access Control in Apple Ipados exploit
  • JWT-PHANTOM exploit
• Terence Eden’s Blog
  • Someone at BrowserStack is Leaking Users' Email Address
• The Decoder
  • AI chatbot traffic grows seven times faster than social media but still trails by a factor of four
  • AI offensive cyber capabilities are doubling every six months, safety researchers find
• unSafe.sh - 不安全
  • Inside WannaCry: Exploit, Worming, and TOR Communication Explained
  • Installing modified APK with Frida Gadget on Android? Testing on my own Android device, I embed Frida Gadget into an APK (Instagram). After modification, install fails or app crashes. What methods allow installing modified APKs? Which Android protections block this? Any tips for test setups?
  • starting Hacking
• VulDB Recent Entries
  • CVE-2016-20050 | Foundstone NetSchedScan 1.0 Hostname/IP out-of-bounds write (Exploit 39242 / EDB-39242)
  • CVE-2016-20051 | Snews CMS 1.7 username/password cross-site request forgery (Exploit 40705 / EDB-40705)
  • CVE-2016-20052 | Snews CMS 1.7 unrestricted upload (Exploit 40706 / EDB-40706)
  • CVE-2016-20053 | Redaxo CMS 5.2 Users Endpoint cross-site request forgery (Exploit 40708 / EDB-40708)
  • CVE-2016-20054 | nodCMS 1.0 admin/user_manipulate cross site scripting (Exploit 40707)
  • CVE-2016-20055 | IObit Advanced SystemCare 10.0.2 AdvancedSystemCareService10 Service unquoted search path (Exploit 40577 / EDB-40577)
  • CVE-2016-20056 | Spy-Emergency Spy Emergency 23.0.205 SpyEmrgSrv Service unquoted search path (Exploit 40550 / EDB-40550)
  • CVE-2016-20057 | Netgate Registry Cleaner 16.0.205 NGRegClnSrv Service unquoted search path (Exploit 40539 / EDB-40539)
  • CVE-2016-20058 | Netgate AMITI Antivirus 23.0.305 AmitiAntivirusHealth Service unquoted search path (Exploit 40540 / EDB-40540)
  • CVE-2016-20059 | IObit Malware Fighter 4.3.1 LiveUpdateSvc Service unquoted search path (Exploit 40525 / EDB-40525)
  • CVE-2016-20060 | Hotspotshield Hotspot Shield 6.0.3 Hshld Service unquoted search path (Exploit 40528 / EDB-40528)
  • CVE-2016-20061 | Sheedantivirus Sheed AntiVirus 2.3 ShavProt Service unquoted search path (Exploit 40497 / EDB-40497)
  • CVE-2018-25238 | VSCO 1.1.1.0 Search overlap between protected memory ranges (Exploit 46385 / EDB-46385)
  • CVE-2018-25239 | SmartVPN Smart VPN 1.1.3.0 Search Interface externally-controlled input to select classes or code (Exploit 46272 / EDB-46272)
  • CVE-2018-25240 | Watchr 1.1.0.0 Search overlap between protected memory ranges (Exploit 46194 / EDB-46194)
  • CVE-2018-25241 | VPNBrowser VPN Browser+ 1.1.0.0 search missing authentication (Exploit 46198 / EDB-46198)
  • CVE-2018-25242 | OneSearch One Search 1.1.0.0 search incorrect parsing of numbers with different radices (Exploit 46195 / EDB-46195)
  • CVE-2018-25243 | FastTube 1.0.1.0 Search release of reference (Exploit 46199 / EDB-46199)
  • CVE-2018-25244 | EcoSearch Eco Search 1.0.2.0 missing protection for mirrored regions in on-chip fabric firewall (Exploit 46196 / EDB-46196)
  • CVE-2018-25245 | 7Tik 7 Tik 1.0.1.0 Search redirect (Exploit 46197 / EDB-46197)
  • CVE-2018-25246 | Wikipedia 12.0 search missing authentication (Exploit 45324)
  • CVE-2018-25247 | Like Plugin 3.0.0 on MyBB Post cross site scripting (Exploit 45179 / EDB-45179)
  • CVE-2018-25248 | Downloads Plugin 2.0.3 on MyBB Parameter Title cross site scripting (Exploit 44400 / EDB-44400)
  • CVE-2018-25249 | My Arcade Plugin 1.3 on MyBB Comment cross site scripting (Exploit 44186 / EDB-44186)
  • CVE-2018-25250 | Last User's Threads in Profile Plugin 1.2 on MyBB subject cross site scripting (Exploit 44339 / EDB-44339)
  • CVE-2018-25251 | Snes9K 0.0.9z Netplay Options Menu Socket Port Number out-of-bounds write (Exploit 45598 / EDB-45598)
  • CVE-2018-25252 | Serv-U FTP Voyager 16.2.0 Site Site Profile IP out-of-bounds write (Exploit 45527 / EDB-45527)
  • CVE-2018-25253 | Compuphase Termite 3.4 User Interface Language out-of-bounds write (Exploit 45453 / EDB-45453)
  • CVE-2018-25254 | NICO-FTP 3.0.1.19 FTP Service out-of-bounds write (Exploit 45442 / EDB-45442)
  • CVE-2018-25255 | 10-Strike LANState 8.8 LSM Map File Parser ObjCaption out-of-bounds write (Exploit 45086 / EDB-45086)
  • CVE-2026-5583 | PHPGurukul Online Shopping Portal Project 2.1 Parameter /my-profile.php fullname sql injection
  • CVE-2026-5584 | Fosowl agenticSeek 0.1.0 query Endpoint PyInterpreter.py PyInterpreter.execute code injection
  • CVE-2026-5585 | Tencent AI-Infra-Guard 4.0 Task Detail Endpoint task_manager.go information disclosure
  • CVE-2026-5586 | zhongyu09 openchatbi up to 0.2.1 Multi-stage Text2SQL Workflow keywords sql injection
  • CVE-2026-5587 | wbbeyourself MAC-SQL up to 31a9df5e0d520be4769be57a4b9022e5e34a14f4 Refiner Agent core/agents.py _execute_sql sql injection
  • CVE-2026-5590 | zephyrproject-rtos Zephyr up to 4.3 TCP Connection tcp_recv null pointer dereference (GHSA-4vqm-pw24-g9jp)
  • CVE-2026-5594 | premAI-io premsql up to 0.2.1 followup.py eval result code injection
  • CVE-2026-5595 | griptape-ai griptape 0.19.4 FileManagerTool path traversal
  • CVE-2026-5596 | griptape-ai griptape 0.19.4 SqlTool tool.py sql injection
  • CVE-2026-5597 | griptape-ai griptape 0.19.4 ComputerTool tool.py filename path traversal
  • CVE-2026-5599 | pretix Venueless API improper isolation or compartmentalization (02b9cbe5)
  • CVE-2026-5601 | Acrel Electrical Prepaid Cloud Platform 1.0 Backup File /bin.rar information disclosure
  • CVE-2026-5602 | Nor2-io heim-mcp up to 0.1.3 new_heim_application src/tools.ts registerTools os command injection
  • VDB-355351 | PHPGurukul Online Shopping Portal Project 2.1 Parameter /order-details.php orderid sql injection
• WIRED
  • The Hack That Exposed Syria’s Sweeping Security Failures
• 量子位
  • Linux内核维护者崩溃了！AI每天狂塞10份漏洞报告，想摸会鱼都难