Aggregator

2026年05月28日（現地時間）、米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。

Anthropic has confirmed that it plans to bring Mythos-class models to the general public after delaying the rollout due to security risks to public and private software. [...]

这里记录每周值得分享的科技内容，周五发布。

欧盟委员会官员正计划与Anthropic会面，以获取有关Mythos模型的更多信息，并请求向欧盟开放该模型。自该公司透露该模型极度擅长寻找网络漏洞并可能构成重大网络安全风险以来，欧盟一直在推动获取My

strongSwan 5.9.13 - DoS

strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow

CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)

Wing FTP Server 8.1.3 - Authenticated Remote Code Execution

MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution

Linux Kernel - Local Privilege Escalation

ZTE H298A / H108N - Unauthenticated Credential Exposure

ZTE ZXHN H188A V6 - Authentication Bypass

ZTE Routers - Unauthenticated Denial of Service

ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion

Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution

Langflow 1.3.0 - Remote Code Execution

Prodigy Commerce 3.3.0 - Local File Inclusion

MikroORM 7.0.13 - SQL Injection

Microsoft - NTLMv2 Hash Capture