Aggregator

A vulnerability classified as critical has been found in Keycloak. This impacts an unknown function of the component SAML Identity Provider Handler. Performing a manipulation results in improper authentication. This vulnerability is known as CVE-2026-2603. Access to the local network is required for this attack. No exploit is available.

A vulnerability categorized as problematic has been discovered in OpenClaw up to 2026.2.25. This issue affects some unknown processing of the file /api/channels of the component Gateway Plugin. Executing a manipulation can lead to authentication bypass by alternate name. This vulnerability is tracked as CVE-2026-32036. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in OpenClaw up to 2026.2.23. This affects an unknown part. Performing a manipulation results in path traversal. This vulnerability is cataloged as CVE-2026-32033. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

审计 n8n CVE-2026-25049 补丁过程中发现的一个新绕过变体，能主机上执行远程代码，从而有效绕过所有沙箱限制。所有使用基于 vm2 沙箱的 n8n 版本（1.123.17 至 1.123.20）均受影响。

四川警察学院联合成都欧深特信息科技有限公司在成都校区（成都市双流区黄水镇云岭路36号）举办开源情报分析师实战能力培训班，第2期培训班定于2026年4月26日至5月1日举行。

2026年3月19日，美国众议院监督和政府改革委员会成员罗伯特·加西亚和美国参议院财政委员会成员罗恩·怀登写信给白宫幕僚长苏西·威尔斯和总统法律顾问大卫·沃灵顿，问责特朗普女婿的腐败问题。

嗯，用户让我用中文帮他总结一篇文章，控制在100字以内，而且不需要特定的开头。首先，我需要理解文章的内容。看起来文章提到“环境异常”，然后说完成验证后可以继续访问，还有“去验证”的按钮。 用户可能是在访问某个网站或者应用时遇到了问题，系统提示环境异常需要验证。他可能想快速了解问题所在，所以需要一个简洁的总结。 我应该把重点放在环境异常和验证这两个关键点上，同时保持语言简洁明了。不需要复杂的结构，直接说明情况和解决方法。 所以，总结应该是：当前环境出现异常，需完成验证后才能继续访问。 当前环境出现异常，需完成验证后才能继续访问。

A vulnerability categorized as critical has been discovered in OpenClaw up to 2026.3.1. This vulnerability affects unknown code. Such manipulation leads to link following. This vulnerability is traded as CVE-2026-22180. An attack has to be approached locally. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in OpenClaw up to 2026.2.20. This impacts an unknown function of the component Gateway Service. Such manipulation of the argument NODE_OPTIONS leads to external control of system or configuration setting. This vulnerability is referenced as CVE-2026-22177. The attack can only be performed from a local environment. No exploit is available. Upgrading the affected component is advised.

A vulnerability was found in OpenClaw up to 2026.2.18. It has been rated as critical. Impacted is the function os.tmpdir of the file extensions/feishu/src/media.ts of the component Temporary File Handler. Performing a manipulation results in path traversal. This vulnerability is reported as CVE-2026-22171. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability categorized as critical has been discovered in OpenClaw up to 2026.2.22. The affected element is an unknown function. Executing a manipulation can lead to incomplete blacklist. This vulnerability appears as CVE-2026-22175. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability labeled as problematic has been found in OpenClaw up to 2026.2.18. This affects the function stripBotMention of the component Block Message Handler. The manipulation results in inefficient regular expression complexity. This vulnerability is known as CVE-2026-22178. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in OpenClaw up to 2026.3.1. This vulnerability affects unknown code of the component Environment Variable Handler. The manipulation results in server-side request forgery. This vulnerability is identified as CVE-2026-22181. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in OpenClaw up to 2026.2.20. Affected by this vulnerability is an unknown functionality. Such manipulation leads to argument injection. This vulnerability is traded as CVE-2026-22168. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability was found in danvei233 xiaoheiFS up to 0.3.x. It has been classified as critical. Affected is an unknown function of the file plugins/payment/ of the component AdminPaymentPluginUpload. Performing a manipulation results in unrestricted upload. This vulnerability is known as CVE-2026-28674. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

嗯，用户让我用中文帮他总结一下一篇文章的内容，控制在一百个字以内，而且不需要以“文章内容总结”或者“这篇文章”这样的开头，直接写描述。好的，我先看看他提供的文章内容。 文章是关于网站使用cookies的。开头提到他们在网站上使用cookies来记住用户的偏好和重复访问，从而提供最相关的体验。然后说点击“Accept All”就是同意使用所有cookies。不过用户也可以去“Cookie Settings”来提供受控的同意。 那我需要把这些信息浓缩到100字以内。首先，要点包括：网站使用cookies、记住偏好、改善体验、用户可设置或接受所有cookies。 接下来，我得组织语言，确保简洁明了。可能的结构是先说明cookies的作用，然后提到用户的选择。 比如：“本网站使用cookies以记住您的偏好并提升您的浏览体验。您可选择接受所有cookies或通过设置进行个性化管理。” 这样刚好在100字以内，而且直接描述了内容，没有多余开头。 检查一下是否覆盖了所有要点：cookies用于记住偏好、改善体验、用户可以选择接受或设置。是的，都涵盖了。 最后确认一下语言是否流畅自然，没有语法错误。 本网站使用cookies以记住您的偏好并提升您的浏览体验。您可选择接受所有cookies或通过设置进行个性化管理。

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. WorldLeaks ransomware group breached the City of Los Angels PolyShell flaw exposes Magento and Adobe Commerce […]

好的，我现在需要帮用户总结一篇文章的内容，控制在100字以内。首先，我得仔细阅读用户提供的文章内容，了解主要事件和关键点。 文章讲的是Halide的联合创始人塞巴斯蒂安·德·维特跳槽到苹果公司的事情。Lux Optics是Halide的幕后团队，而Halide是iPhone上很受欢迎的专业摄影应用。苹果去年曾试图收购Lux，但谈判失败后直接聘请了德·维特。然而，另一位联合创始人本·桑多夫斯基在法庭上指控德·维特在2025年12月因财务不当行为被解雇，并且他带走了公司的源代码和机密材料。 接下来，我需要提取这些关键信息，并将其浓缩到100字以内。要确保涵盖主要人物、事件、指控以及涉及的公司和金额。 可能的结构是：德·维特跳槽到苹果，带走了源代码和机密材料，并涉及财务不当行为，被指控挪用超过15万美元的资金。 最后，检查字数是否符合要求，并确保语言简洁明了。 Lux Optics联合创始人塞巴斯蒂安·德·维特被指控带源代码跳槽苹果，并不当使用公司资金。

索尼战略大调整：PS Plus 将整合影音内容，放弃 PC 原生移植； 60 加 60 等于 120 言论引争议，雷军：确实说错了，感谢网友们指正； 马斯克宣布 Grok Computer 智能体即将上线