最新预警列表

重置
严重 高危 国内 Linux 发行版 云厂商 主机安全 开源社区 云原生 漏洞数据库 官方通告 已被利用 漏洞预警 CVE 官方源 厂商通告 PSIRT 网络设备 DDoS 攻击情报 厂商报告 NVD Recent openEuler 安全公告 OSV CISA KEV Cisco PSIRT CERT/CC VU CERT-EU Huawei PSIRT 阿里云 Alibaba Cloud Linux 安全公告 Cloudflare DDoS
HIGH CERT/CC VU 2026-11-11

VU#701544: Retraction of mpc-lib hardened derivation fails to protect ancestor isolation

Overview Fireblocks' mpc-lib library contains a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation in the case of a missing private parent key. This breaks the ancestor isolation property of hardened derivation, allowing

查看官方参考
HIGH CERT/CC VU 2026-10-27

VU#573195: Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint inconsistency in RFC 5280 implementation

Overview This note covers differences in how TLS libraries interpret X.509 Name Constraints. A certificate that one library accepts may be rejected by another. Some of those differences are defects; others follow from behavior that RFC 5280 does not fully

查看官方参考
HIGH CERT/CC VU 2026-10-01

VU#553437: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations

Overview An Out-of-bounds Write vulnerability in the InsydeH2O IHISI software used by HP PC BIOS can allow a local attacker with OS kernel privileges to perform arbitrary physical memory writes, including writes to System Management RAM (SMRAM). Because t

查看官方参考
HIGH CERT/CC VU 2026-08-05

VU#360868: Local Privilege escalation vulnerability in Analog Way Picturall Quad Compact Mark II version 3.5.8

Overview Version 3.5.8 of Analog Way's Picturall Quad Compact Mark II server contains a local privilege escalation vulnerability, tracked as CVE-2026-14985, due to improper privilege delegation and insufficient input validation in a maintenance script. De

查看官方参考

站内所有资源、漏洞预警、工具与专题内容仅面向企业授权自测、合规研究与安全运维使用。本站不提供可直接用于非法攻击的程序、载荷或黑产平台入口。