目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1000 元

100.0%
请我们喝杯咖啡

安全情报专区 24+

精选漏洞公告、利用分析、安全博客、GHSA Advisory 等情报来源，已自动清洗 + 中英双语呈现，持续更新。

示例：RCE · SSRF · GHSA · 反序列化
筛选
清除筛选
精品
Critical
AWS ECS Agent FSx Windows卷挂载命令注入漏洞
github.com · 2026-05-01
Amazon ECS Agent 1.47.0.1 - 1.102.2
Read more
Medium
FreeRTOS-Plus-TCP IPv6 RA解析越界读取漏洞(CVE-2026-7425)
GHSA-gffr-xgjj-jhvj · github.com · 2026-04-30
FreeRTOS-Plus-TCP >=V4.0.0 AND <=V4.2.5 · FreeRTOS-Plus-TCP >=V4.3.0 AND <V4.4.0
Read more
Medium
FreeRTOS-Plus-TCP ICMP Echo Reply 整数下溢导致DoS漏洞
github.com · 2026-04-30
FreeRTOS-Plus-TCP >=V4.0.0 AND <=V4.2.5 · FreeRTOS-Plus-TCP >=V4.3.0 AND <=V4.4.0
Read more
High
tough 库和 tuftool CLI 工具中的问题
2026-019-AWS · aws.amazon.com · 2026-04-25
tough 0.1.0 - 0.21.x · tuftool 0.1.0 - 0.14.x
Read more
Medium
awslabs/tough 中缺失委托元数据验证 · 公告 · awslabs/tough · GitHub
CVE-2026-6967 · github.com · 2026-04-25
tough < 0.22.0 · tuftool < 0.15.0
Read more
精品
High
AWS Ops Wheel 权限提升漏洞 (CVE-2026-6912) 分析
CVE-2026-6912 · github.com · 2026-04-25
AWS Ops Wheel v2 (deployments between PR #147 and PR #163)
Read more
精品
Critical
AWS Ops Wheel CVE-2026-6911 JWT签名验证绕过漏洞分析
CVE-2026-6911 · github.com · 2026-04-25
aws-ops-wheel < PR #164
Read more
Medium
Firecracker v1.15.1 漏洞修复总结 (DoS/内存安全)
github.com · 2026-04-08
Firecracker < 1.15.1
Read more
High
Firecracker v1.14.4 漏洞修复总结 (内存溢出/DoS/时钟跳跃)
github.com · 2026-04-08
Firecracker v1.14.4
Read more
High
RES 权限提升漏洞及补丁修复指南
github.com · 2026-04-07
AWS Research Engineering Studio (RES) 2025.12.01 and earlier
Read more
精品
Critical
RES虚拟桌面命令注入漏洞及补丁
github.com · 2026-04-07
RES 2025.12.01 · RES 2025.12 …
Read more
Critical
AWS RES 多个远程代码执行与权限提升漏洞 (CVE-2026-5707/5708/5709)
CVE-2026-5707 · aws.amazon.com · 2026-04-07
AWS Research and Engineering Studio (RES) <= 2025.12.01
Read more
Unknown
CVE-2026-5190 AWS C Event Stream 堆栈缓冲区溢出漏洞
CVE-2026-5190 · aws.amazon.com · 2026-04-02
aws-c-event-stream < 0.6.0 · aws-crt-python < 1.4.0 …
Read more
High
AWS aws-c-event-stream 解码缓冲区溢出漏洞修复
github.com · 2026-04-02
aws-c-event-stream < v0.6.0
Read more
Critical
AWS SDK for C++ 事件流解析内存损坏漏洞 (CVSS 9.8)
github.com · 2026-04-02
aws-sdk-cpp < 1.6.6 · aws-c-io < 0.14.0 …
Read more
High
AWS SageMaker Python SDK CVE-2026-1777 远程代码执行漏洞
CVE-2026-1777 · github.com · 2026-02-04
sagemaker-python-sdk < 3.2.0 · sagemaker-python-sdk < 2.256.0
Read more
High
AWS SageMaker Python SDK HMAC泄露与TLS绕过漏洞(CVE-2026-1777/1778)
SA-CORE-2026-004 · aws.amazon.com · 2026-02-03
SageMaker Python SDK < 3.2.0 · SageMaker Python SDK < 2.256.0
Read more
Medium
Firecracker Jailer符号链接任意文件覆盖漏洞 (CVE-2026-1386)
GHSA-36j2-f825-qvgc · github.com · 2026-01-27
Firecracker < v1.13.1 · Firecracker v1.14.0
Read more
Medium
AWS SDK for .NET V4 region参数验证绕过漏洞(CVE-2026-22611)
CVE-2026-22611 · github.com · 2026-01-20
AWS SDK for .NET V4 >= 4.0.0, < 4.0.3.3
Read more
High
AWS Wrappers for Aurora PostgreSQL 提权漏洞 (CVE-2025-12967)
CVE-2025-12967 · aws.amazon.com · 2025-11-12
AWS JDBC Wrapper <2.6.5 · AWS Go Wrapper <2025-10-17 …
Read more

每篇文章经过自动 HTML→Markdown 清洗 + LLM 去噪 + 中英双语翻译。原始链接保留在文章末尾。

想看哪个安全博客 / 公告源？邮件告诉我们，每周新接 1-2 个。