目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

安全情报专区 25+

精选漏洞公告、利用分析、安全博客、GHSA Advisory 等情报来源，已自动清洗 + 中英双语呈现，持续更新。

241
已接入情报源
119
当前稳定在线
368
24 小时新增
25+
AI 处理情报
持续监听、清洗、翻译并进行 AI 分析 监听情报
内容导航 全部情报 🔗 供应链投毒情报 414 恶意包结构化数据库
示例：RCE · SSRF · GHSA · 反序列化
筛选
清除筛选
Unknown
Amazon Ion Python v0.15.0 递归限制漏洞修复
github.com · 2026-10-02
ion-python < 0.15.0
Read more
High
Amazon Ion Python 未受控递归致DoS漏洞(CVE-2026-104020)
CVE-2026-104020 · github.com · 2026-10-02
Amazon Ion Python < 0.15.0
Read more
精品
Unknown
AmazonConnectSalesforceLambda缺失授权漏洞(CVE-2026-94384)分析与修复
CVE-2026-94384 · aws.amazon.com · 2026-09-23
AmazonConnectSalesforceLambda >= 5.15 <= 5.24.16
Read more
精品
Low
AWS Connect Salesforce Lambda 授权缺失漏洞 (CVE-2025-84384) 修复指南
CVE-2025-84384 · github.com · 2026-09-23
AmazonConnectSalesforceLambda 5.26
Read more
High
DJL v0.37.0：修复未限制远程URL加载导致的SSRF漏洞
github.com · 2026-09-11
DJL < 0.37.0 · DJL 0.37.0 (fixed)
Read more
Medium
AWS Postgres MCP-Server SQL注入漏洞(CVE-2026-85787)
CVE-2026-85787 · aws.amazon.com · 2026-09-05
aws-labs postgres-mcp-server < 1.1.7 · pyql < 1.1.7
Read more
High
AWS log4j-hotpatch OS命令注入漏洞（CVE-2026-85656）分析与修复指南
CVE-2026-85656 · aws.amazon.com · 2026-09-05
log4j-cve-2021-44228-hotpatch <= 1.3.8-amzn2
Read more
High
CVE-2026-84851：amazon-ion-c 不可控递归 DoS 漏洞与 1.1.6 修复详情
CVE-2026-84851 · aws.amazon.com · 2026-09-03
Amazon Ion-C < 1.1.6
Read more
Unknown
Amazon Strands Agents python_repl同意绕过漏洞(CVE-2026-78379)
CVE-2026-78379 · aws.amazon.com · 2026-08-26
Strands Agents Tools < 0.8.5
Read more
Medium
s2n-tls漏洞公告: QUIC传输参数内存泄漏 (CVE-2025-10228)
CVE-2025-10228 · github.com · 2026-07-22
s2n-tls <= v1.7.5
Read more
High
AWS Strands Agents Tools凭证泄露漏洞(CVE-2026-15746)
CVE-2026-15746 · github.com · 2026-07-16
strands-agents-tools < 0.7.0
Read more
High
CVE-2026-15746: Strands Agents Tools SSRF导致凭证泄露
CVE-2026-15746 · aws.amazon.com · 2026-07-16
strands-agents-tools < 0.7.0
Read more
High
CVE-2026-15738: AWS ALB Controller路由优先级绕过
CVE-2026-15738 · aws.amazon.com · 2026-07-15
AWS Load Balancer Controller v3.4.1
Read more
High
AWS ALB控制器跨命名空间路由优先级绕过漏洞
github.com · 2026-07-15
aws-load-balancer-controller < 3.4.2
Read more
High
Amazon Athena ODBC 驱动多个安全漏洞公告 (CVE-2020-5493/5500/5510/5520/5530/5540)
2020-0175-aws · aws.amazon.com · 2026-04-04
Amazon Athena ODBC Driver < 2.1.0.0
Read more
Medium
Amazon Ion-C 整数溢出导致未初始化内存读取 (CVE-2025-12829)
GHSA-7mgf-6x73-5h7r · github.com · 2025-11-09
Amazon Ion-C <1.1.4
Read more
Critical
AWS EMR Secret Agent 权限提升漏洞 (CVE-2025-8904)
CVE-2025-8904 · github.com · 2025-09-20
Amazon EMR Secret Agent < 7.5 · Amazon EMR 6.10 …
Read more
Medium
AWS Amazon Q Developer VS Code 扩展 CVE-2025-8217 供应链投毒漏洞
CVE-2025-8217 · github.com · 2025-07-31
Amazon Q Developer for VS Code 1.84.0
Read more
Medium
FreeRTOS-Plus-TCP CVE-2025-5688 越界写入漏洞分析
CVE-2025-5688 · aws.amazon.com · 2025-06-06
FreeRTOS-Plus-TCP v2.3.4-v4.3.1 (LLMNR, Buffer Allocation Scheme 1) · FreeRTOS-Plus-TCP v4.0.0-v4.3.1 (mDNS, Buffer Allocation Scheme 1)
Read more
Medium
GHSA-p69m-h9rw-584v: data.all 登出未失效认证Token漏洞
GHSA-p69m-h9rw-584v · github.com · 2024-11-11
data.all v1.0.0 - 2.6.0
Read more

每篇文章经过自动 HTML→Markdown 清洗 + LLM 去噪 + 中英双语翻译。原始链接保留在文章末尾。

想看哪个安全博客 / 公告源？邮件告诉我们，每周新接 1-2 个。