Aggregator

蓝色起源拟融资 100 亿美元； SpaceXAI 首个编程智能体模型 Grok 4.5 发布；全新奔驰纯电 GLC SUV 车型上市，29.99 万元起

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

A vulnerability, which was classified as problematic, has been found in CycloneDX cyclonedx-node-npm up to 4.x. This vulnerability affects unknown code of the component CLI. The manipulation of the argument --workspace leads to os command injection. This vulnerability is referenced as CVE-2026-55849. The attack can only be performed from a local environment. No exploit is available.

13个高危漏洞POC已更新，覆盖思源笔记/用友U8/蓝凌/Discuz/UniFi等系统漏洞复现。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

微软 Xbox 将把黑曜石工作室转移到开发新的《辐射》系列游戏中据知情人士透露，微软 Xbox 的子公司黑曜石娱乐已取消多个项目，并将开始制作热门《辐射》系列中的一款新游戏，作为该部门更广泛重组的一部

A vulnerability classified as critical was found in CoreWCF up to 1.8.0/1.9.0. This affects an unknown part of the component SAML Token Validation. Executing a manipulation can lead to algorithm downgrade. The identification of this vulnerability is CVE-2026-54781. The attack may be launched remotely. There is no exploit available.

OpenAI 确认 GPT-5.6 系列本周开放使用7 月 8 日，OpenAI 通过 X 平台确认，GPT-5.6 系列的三款 AI 模型 Sol、Terra、Luna 将于本周四正式面向所有用户开

A vulnerability classified as problematic has been found in Monsta Limited of New Zealand Monsta FTP up to 2.14.4. Affected by this issue is the function isBlockedIP of the component IP Blocklist Handler. Performing a manipulation of the argument URL results in server-side request forgery. This vulnerability was named CVE-2026-60105. The attack may be initiated remotely. There is no available exploit.

A vulnerability described as problematic has been identified in GitLab up to 18.11.6/19.0.3/19.1.1. Affected by this vulnerability is an unknown functionality of the component Work Item Metadata Access. Such manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2026-8472. The attack can be launched remotely. No exploit exists.

周三，美国一名联邦法官批准了美国证券交易委员会(SEC)与埃隆·马斯克就购买推特股票一事达成的和解协议。尽管如此，她也表示，对该协议所暴露出的“危险信号”抱有“重大疑虑”。华盛顿特区地区法官斯帕克尔·

A vulnerability marked as problematic has been reported in GitLab up to 18.11.6/19.0.3/19.1.1. Affected is an unknown function of the component Cross-project Reference Pages. This manipulation causes improper authorization. This vulnerability is handled as CVE-2026-7492. The attack can be initiated remotely. There is not any exploit available.

A vulnerability labeled as problematic has been found in GitLab up to 18.11.6/19.0.3/19.1.1. This impacts an unknown function of the component Input Sanitization. The manipulation results in permission issues. This vulnerability is known as CVE-2026-6896. It is possible to launch the attack remotely. No exploit is available.

AI正在重构金融安全运营的底层逻辑，数字银行威胁运营正面临全新挑战。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

A vulnerability identified as critical has been detected in GitLab up to 18.11.6/19.0.3/19.1.1. This affects an unknown function of the component GraphQL Operations. The manipulation leads to improper authorization. This vulnerability is traded as CVE-2026-6352. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability categorized as problematic has been discovered in etcd-io etcd up to 3.5.31/3.6.12. The impacted element is an unknown function of the component gRPC Client Authentication Handler. Executing a manipulation can lead to improper certificate validation. This vulnerability appears as CVE-2026-59818. The attack may be performed from remote. There is no available exploit.