安全资讯归档（2026-04-26）

2Libra
- 【周末闲聊】王之蔑视
- 【💰】?!广东人狂喜!?,自制蟑螂幸存者小游戏卵鞘危机 V1.0 版本发布,纯浏览器也能玩的肉鸽小游戏
- 你“社死”过吗？从社死想到的语义磨损
- 做了个在线拼多多组队拆福袋工具,快速换取折扣劵,快来!
- 大失败之后是不是就是 600 了
- 徽章获取现在有祝贺界面了？新增加的效果吗？
- 捣蛋鬼徽章导致评论的金币记录描述不正确
- 新版本为签到日历和金币页面新增了一些金币数据可视化
36氪
- DeepSeek-V4-Pro模型API官宣限时2.5折优惠
- ST西发：法院裁定受理重整股票将被实施退市风险警示
- “海上高速路”再扩容，青岛港开通西非新集装箱航线
- 上海国际旅游度假区10年累计接待游客超1.8亿人次
- 中信尼雅：股票可能被实施退市风险警示
- 中国长安汽车发布“海纳百川”计划2.0
- 乘联分会崔东树：1-3月中国汽车进口10万辆，同比增3%
- 京东启动AI硬件孵化计划
- 俞敏洪回应东方甄选主播集体离职：是平台的损失
- 利亚德：将进一步推进沙特工厂建设，预计7月投产后将覆盖亚非拉及中东地区
- 北京发布土地经营权流转价格模型
- 华泰证券：光纤光缆产业进入历史大周期
- 去年全国大型演唱会票房295.58亿
- 国信证券：结构上结合行业拥挤度均衡配置，重视科技成长主线、战略资源、以及白酒地产
- 安波福发布“中国定义”核心战略
- 巨人网络：2025年营收超50亿元，同比增长72.69%
- 恒宇信通：筹划购买神导科技100%股权，股票停牌
- 捷佳伟创：第一季度净利润同比下降61.83%
- 摩尔线程：一季报营收7.38亿元，同比增长155.35%
- 欧莱雅BRANDSTORM 2026中国总决赛落幕，AI成美妆创新核心议题｜最前线
- 润芯微“国产软硬一体AI智能基座”发布，破解行业稀缺难题带动多端智能变革
- 湖南AI中心落地湘江新区
- 湖南黄金：第一季度净利润同比增长79.21%
- 申万宏源：一季度公募持仓聚焦科技硬件，增配能源安全产业链
- 申万宏源：市场超跌反弹后震荡休整或将延续，二季度关注5月关键事件验证
- 矽电股份：与兆驰股份子公司签署3.35亿元Mini/MicroLED测试分选设备合同
- 破解行李中转难题民航新版指南明确全新保障模式
- 科氪 | 国民好车深蓝L06增程版亮相北京车展京东PLUS会员购车直减7000多元
- 科氪|北京车展重磅发布！京东汽车独家线上销售212全民越野车T01 METTA
- 美国太空军披露“金穹”合同细节：SpaceX、安杜里尔等12家公司获32亿美元订单
- 芯擎科技发布新一代AI座舱芯片“龍鹰二号”，将于2027年Q1启动适配
- 超算互联网推出DeepSeek-V4限时免费对话服务
- 近一周机构调研个股超350只，鼎泰高科热度第一
- 长三角海铁联运提前14天突破百万标箱，同比增长11.3%
- 陈茂波：今年以来香港新股集资额继续位列全球首位
Articles | InfoStealers
- Korean matchmaking service Duo fined over £600,000 over sensitive data leak from Infostealer infection
defend.network
- Daily Threat Briefing – April 26, 2026
Hacker News Frontpage
- Europe to burned American scientists: We'll take you in
- Exposing Floating Point – Bartosz Ciechanowski
- Statecharts: hierarchical state machines
- The AI Industry Is Discovering That the Public Hates It
- The West Forgot How to Make Things. Now It's Forgetting How to Code
- Trump fires all 24 members of the U.S. National Science Foundation
- Why Has There Been So Little Progress on Alzheimer's Disease?
idiallo.com
- The Satisfaction of a ChatGPT Plan
InfoSec Write-ups - Medium
- Everything You Need to Know About the DPDPA Act
- Hacking into Eternal.com | Hackerone
- How to Learn Web & API Hacking in 2026: The Complete Roadmap
- I Tried to Social Engineer My Friends (With Permission) — Every Single One Fell For It
- Malware Analysis: payloadfinal.bin (Agent Tesla)
- Malware That Lives in Your GPU : The Idea Is Simple and Brilliant
- PicoCTF Challenge useless — Writeup
- SSH vs SSL/TLS — Lessons I Learned While Studying Cybersecurity and Solving Labs
- Understanding DNS — The Internet’s Phonebook
- Why Phishing Still Works (Even If You Know About It)
- Your Email Inbox is Lying to You (And How to Catch It Red-Handed)
johndcook.com
- Closed-form solution to the nonlinear pendulum equation
Recent Commits to cve:main
- Update Sun Apr 26 11:18:36 UTC 2026
Security Affairs
- SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 94
- Security Affairs newsletter Round 574 by Pierluigi Paganini – INTERNATIONAL EDITION
- Trigona ransomware adopts custom tool to steal data and evade detection
simonwillison.net
- WHY ARE YOU LIKE THIS
Sploitus.com Exploits RSS Feed
- arm-64-exploit-demo exploit
- binary-exploitation-buffer-overflow exploit
- CodeAlpha_Bug-Bounties-Tool exploit
- ethical-hacking-ctf exploit
- Exploit for CVE-2026-3844 exploit
- Exploit for CVE-2026-41177 exploit
- Exploit for CVE-2026-7020 exploit
- Exploit for Missing Authentication for Critical Function in Coreweave Marimo exploit
- Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple exploit
- exploit.se exploit
- secops-ai-threat-analyzer exploit
TechCrunch
- Anthropic created a test marketplace for agent-on-agent commerce
- Maine’s governor vetoes data center moratorium
- OpenAI CEO apologizes to Tumbler Ridge community
- SpeakOn’s dictation device is a good idea marred by platform limitations
- The climate tech IPO window could finally be cracking open
- Why Cohere is merging with Aleph Alpha
The Decoder
- 500 investment bankers review AI outputs and find none ready for client delivery
- AI agents aren't replacing software engineering but expanding it far beyond code, researchers argue
- GPT-5.5 tops benchmarks but still hallucinates frequently and costs 20 percent more over the API
- OpenAI kills its dedicated coding model Codex again, folding it into GPT-5.5
- OpenAI says old prompts are holding GPT-5.5 back and developers need a fresh baseline
- Survey finds Claude's weekly active users in the US skew far wealthier than any rival AI assistant
The Verge
- After three months on Linux, I don’t miss Windows at all
- An influx of used EVs could drive down prices
- Trump fires the entire National Science Board
VulDB Recent Entries
- CVE-2018-25263 | faleemi Faleemi Desktop Software 1.8.2 Managing Log Interface alias buffer overflow (Exploit 45492)
- CVE-2018-25264 | Acutesystems TransMac 12.2 license key buffer overflow (Exploit 45493)
- CVE-2018-25273 | Acutesystems CrossFont 7.5 License Key buffer overflow (Exploit 45494)
- CVE-2018-25274 | InfraRecorder 0.53 Text File memory allocation (Exploit 45413)
- CVE-2018-25275 | Faleemi Plus 1.0.2 Camera name/DID number buffer overflow (Exploit 45414)
- CVE-2018-25276 | Picajet RoboImport 1.2.0.72 Registration Registration Name/Registration Key buffer overflow (Exploit 45382)
- CVE-2018-25277 | Br-Software PixGPS 1.1.8 folder path buffer overflow (Exploit 45381)
- CVE-2018-25278 | Picajet PicaJet FX 2.6.5 Registration Registration Name/Registration Key buffer overflow (Exploit 45383)
- CVE-2018-25279 | Convertimagetotext jiNa OCR Image to Text 1.0 PNG File memory allocation (Exploit 45380)
- CVE-2018-25280 | Infiltration-Systems Infiltrator Network Security Scanner 4.6 Scan Target buffer overflow (Exploit 45390)
- CVE-2018-25281 | Maxprog iCash 7.6.5 Host buffer overflow (Exploit 45388)
- CVE-2018-25282 | Nmap 7.70 XML File recursion (Exploit 45357)
- CVE-2018-25283 | Securimport iSmartViewPro 1.5 System Setup Interface buffer overflow (Exploit 45349)
- CVE-2018-25284 | Hdtune HD Tune Pro 5.70 folder/file buffer overflow (Exploit 45298)
- CVE-2018-25285 | Fathom 2.4 Authorization Code buffer overflow (Exploit 45294)
- CVE-2018-25286 | Hdtune Easy PhotoResQ 1.0 folder/filename buffer overflow (Exploit 45300)
- CVE-2018-25287 | Hdtune Drive Power Manager 1.10 Name buffer overflow (Exploit 45299)
- CVE-2018-25288 | Editorsoftware StyleWriter 1.0 Advice Message buffer overflow (Exploit 45250)
- CVE-2018-25289 | Ezbsystems Softdisk 3.0.3 Registration Name buffer overflow (Exploit 45245)
- CVE-2018-25290 | Ezbsystems Easyboot 6.6.0 buffer overflow (Exploit 45241)
- CVE-2018-25291 | Pj64-Emu Project64 2.3.2 Directories Interface buffer overflow (Exploit 45229)
- CVE-2018-25292 | Bome Restorator 1793 Name buffer overflow (Exploit 45223)
- CVE-2018-25293 | Mersenne Prime95 29.4b7 optional proxy password buffer overflow (Exploit 45226)
- CVE-2018-25295 | P10 ObserverIP Scan Tool 1.4.0.1 memory allocation (Exploit 45204)
- CVE-2018-25296 | P10 Central Management Software 1.4.13 Password buffer overflow (Exploit 45207)
- CVE-2018-25297 | Wansview 1.0.2 Camera name/DID number buffer overflow (Exploit 45194)
- CVE-2026-40557 | Apache Storm Prometheus Reporter up to 2.8.6 certificate validation
- CVE-2026-41081 | Apache Storm Client up to 2.8.6 TLS Client Authentication Failure certificate validation
- CVE-2026-41163 | containers bubblewrap 0.11.0/0.11.1 ptrace access control
- CVE-2026-7045 | baomidou dynamic-datasource 2.5.0 StandardEvaluationContext/SpelExpressionParser DsSpelExpressionProcessor.java DsSpelExpressionProcessor#doDetermineDatasource injection (Issue 766)
- CVE-2026-7053 | Tenda F456 1.0.0.5 httpd /goform/L7Prot frmL7ProtForm page buffer overflow
- CVE-2026-7054 | Tenda F456 1.0.0.5 httpd /goform/PPTPDClient fromPptpUserAdd opttype/usernamewith buffer overflow
- CVE-2026-7055 | Tenda F456 1.0.0.5 httpd /goform/VirtualSer fromVirtualSer menufacturer/Go buffer overflow
- CVE-2026-7056 | Tenda F456 1.0.0.5 httpd /goform/SafeUrlFilter fromSafeUrlFilter page buffer overflow
- CVE-2026-7057 | Tenda F456 1.0.0.5 httpd /goform/setcfm funcname/funcpara1 buffer overflow
- CVE-2026-7058 | 666ghj MiroFish up to 0.1.2 Inter-Process Communication simulation_ipc.py SimulationIPCClient.send_command command injection (Issue 488)
- CVE-2026-7059 | 666ghj MiroFish up to 0.1.2 Query Parameter simulation.py get_simulation_posts Platform path traversal (Issue 489)
- CVE-2026-7060 | liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec MyBatis-Plus PictureServiceImpl.java PageRequest sortField sql injection
- CVE-2026-7061 | Toowiredd chatgpt-mcp-server up to 0.1.0 MCP/HTTP docker.service.ts os command injection
- CVE-2026-7062 | Intina47 context-sync up to 2.0.0 Git Integration src/git-integration.ts os command injection (Issue 31)
- CVE-2026-7063 | code-projects Employee Management System 1.0 Endpoint eprocess.php pwd sql injection
- CVE-2026-7064 | AgentDeskAI browser-tools-mcp up to 1.2.0 browser-connector.ts os command injection (Issue 232)
- CVE-2026-7065 | BidingCC BuildingAI up to 26.0.1 Remote Upload API file-storage.service.ts uploadRemoteFile url server-side request forgery (Issue 110)
- CVE-2026-7066 | choieastsea simple-openstack-mcp up to 767b2f4a8154cca344344b9725537a58399e6036 server.py exec_openstack os command injection
- CVE-2026-7067 | D-Link DIR-822 A_101 udhcpd DHCP Service /udhcpcd/dhcpd.c system Hostname command injection
- CVE-2026-7068 | D-Link DIR-825 3.00b32 nmbd sserver.c NMBD_process buffer overflow
- CVE-2026-7069 | D-Link DIR-825 up to 3.00b32 miniupnpd upnpsoap.c AddPortMapping NewPortMappingDescription buffer overflow
- CVE-2026-7070 | code-projects Inventory Management System 1.0 Login Username sql injection
- CVE-2026-7071 | CodeAstro Online Job Portal 1.0 /users/user-cvs/ file information disclosure
- CVE-2026-7072 | CodePanda Source canteen_management_system 1.0 /api/login.php Username sql injection
- CVE-2026-7083 | likeadmin-likeshop likeadmin_php up to 1.9.6 dataTable Admin API DataTableLists.php queryResult sql injection
- CVE-2026-7084 | HBAI-Ltd Toonflow-app up to 1.1.1 getCodeByLink Endpoint getCodeByLink.ts fetch server-side request forgery (Issue 95)
- CVE-2026-7085 | HBAI-Ltd Toonflow-app up to 1.1.1 downloadApp Endpoint downloadApp.ts z.url path traversal (Issue 96)
- CVE-2026-7086 | HBAI-Ltd Toonflow-app up to 1.1.1 Storyboard Export replaceUrl.ts updateStoryboardUrl url path traversal (Issue 97)
- CVE-2026-7087 | SourceCodester Pharmacy Sales and Inventory System 1.0 ajax.php?action=save_sales ID sql injection
- CVE-2026-7088 | SourceCodester Pharmacy Sales and Inventory System 1.0 ajax.php?action=save_receiving ID sql injection
- CVE-2026-7089 | code-projects Home Service System 1.0 Appointment Booking /booking.php fname/lname cross site scripting
- CVE-2026-7090 | code-projects Chat System 1.0 Chat Interface /admin/send_message.php msg cross site scripting
- CVE-2026-7091 | code-projects Invoice System in Laravel 1.0 User Management /user improper authorization
- CVE-2026-7092 | code-projects Invoice System in Laravel 1.0 Profile /profile/ ID improper authorization
- CVE-2026-7093 | code-projects Invoice System in Laravel 1.0 Invoice Endpoint /invoice/ ID improper authorization
- CVE-2026-7094 | ShadowCloneLabs GlutamateMCPServers up to e2de73280b01e5d943593dd1aa2c01c5b9112f78 puppeteer_navigate src/puppeteer/index.ts url server-side request forgery
- CVE-2026-7103 | code-projects Chat System 1.0 MD5 Hash update_user.php Password weak hash
Wired
- California Engineer Identified in Suspected Shooting at White House Correspondents' Dinner
- Della Optima TP Series Mini-Split AC Review: Cheap, Smart, and (Mostly) Reliable
- Ikea's New Blow-Up Chair Was Tested by Cats
- The Best Kindle Accessories (2026): Cases, Page Turners, Stickers
- The Best Permanent Outdoor Lights (2026): Govee, Eufy, Cync
- What Type of Mattress Is Right for You? (2026)
- ‘STAGED’: Conspiracy Theories Are Everywhere Following White House Correspondents' Dinner Shooting
不安全
- How to Learn Web & API Hacking in 2026: The Complete Roadmap
代码审计星球
- 原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
博客
- ZHITAI Ti600 4T nvme0n1 critical medium error, dev nvme0n1 Media and Data Integrity Errors
量子位 QbitAI
- DeepSeek阮翀加盟元戎首秀，详解基座VLA，研发提效10倍
阿小信的博客
- Ollama launch用法详解：Claude Code、Codex、Hermes Agent、OpenClaw、VS Code等主流工具集成一步到位，本地AI大模型多场景复用
- Ollama 命令速查手册：全命令参数、用法与实操指南
- 本地大模型进阶｜Ollama Tool Calling完全教程：工具调用原理、实操与Agent循环实战
黑海洋
- AI热潮导致加价Mac mini涌入eBay市场
- SpaceX、安杜里尔等12家公司获“金穹”合同
- 北京禁令影响大疆将全面下架无人机产品
- 维基媒体与印度尼西亚达成妥协以避免被屏蔽
- 美国产原油运抵日本中东局势恶化后尚属首次
- 英伟达公司市值再次突破5万亿美元大关
- 造谣雷军“被围堵维权”者被行拘十日