目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

安全情报专区 76+

精选漏洞公告、利用分析、安全博客、GHSA Advisory 等情报来源，已自动清洗 + 中英双语呈现，持续更新。

213
已接入情报源
94
当前稳定在线
398
24 小时新增
76+
AI 处理情报
持续监听、清洗、翻译并进行 AI 分析 监听情报
示例：RCE · SSRF · GHSA · 反序列化
筛选
清除筛选
High
Amazon OpenSearch存储型XSS漏洞(CVE-2026-77811)通告
CVE-2026-77811 · aws.amazon.com · 2026-08-22
OpenSearch Dashboards dashboards-observability plugin <= 3.4 · OpenSearch Dashboards dashboards-observability plugin <= 2.19.6 …
Read more
High
OpenSearch Dashboards 存储型XSS漏洞(CVE-2026-77811)及补丁说明
CVE-2026-77811 · github.com · 2026-08-22
OpenSearch Dashboards < 3.4 · OpenSearch Dashboards < 2.19.6
Read more
精品
High
AWS Athena Neptune 连接器权限提升漏洞(CVE-2026-77810)公告
CVE-2026-77810 · aws.amazon.com · 2026-08-22
Athena Federated Query Neptune Connector <=v2026.28.1 AND >=v2024.15.1
Read more
精品
Critical
AWS Athena Neptune 连接器提权漏洞 (CVE-2026-77810)
CVE-2026-77810 · github.com · 2026-08-22
aws-athena-query-federation <=v2026.28.1
Read more
精品
High
OpenSearch Dashboards TSVB RCE漏洞(CVE-2026-18420)公告
CVE-2026-18420 · aws.amazon.com · 2026-08-21
OpenSearch-Dashboards >= 3.0.0, < 3.8.0
Read more
精品
Critical
OpenSearch Dashboards TSVB插件原型污染导致RCE漏洞通告
github.com · 2026-08-21
OpenSearch Dashboards >= 3.0.0, < 3.8.0
Read more
High
AWS Athena Clickhouse连接器漏洞CVE-2026-75910漏洞公告
CVE-2026-75910 · aws.amazon.com · 2026-08-21
aws-athena-query-federation <v2026.17.1
Read more
Unknown
BouncyCastle、H2、Log4j2等依赖库安全升级修复漏洞
github.com · 2026-08-21
Athena Query Federation < v2026.17.1
Read more
Medium
AWS Athena ClickHouse连接器权限配置错误致密钥泄露(CVE-2026-7810)
CVE-2026-7810 · github.com · 2026-08-21
aws-athena-query-federation < V2026.17.1
Read more
精品
Unknown
OpenSearch SQL 插件异步查询验证绕过漏洞 (CVE-2026-18428)
CVE-2026-18428 · aws.amazon.com · 2026-08-14
OpenSearch SQL Plugin v2.13 to v5.6 · Amazon OpenSearch Service v2.13 to v3.5
Read more
Medium
AWS SDK for C++ Base64解码越界写入漏洞(GHSA-xxx3-prfc-69cx)及修复指南
GHSA-xxx3-prfc-69cx · github.com · 2026-08-13
aws-cpp-sdk-core <= 1.11.861
Read more
Medium
OpenSearch Alerting 插件越权访问漏洞 (GHSA-xpqp-q3wh-685q)
GHSA-xpqp-q3wh-685q · github.com · 2026-08-13
OpenSearch Alerting < 2.19.6 · OpenSearch Alerting < 3.8.0
Read more
High
OpenSearch Security Analytics SSRF漏洞 (CVE-2026-18952)
CVE-2026-18952 · aws.amazon.com · 2026-08-13
OpenSearch Security Analytics Plugin >= 2.15.0 · Amazon OpenSearch Service engine version >= 2.15.0
Read more
High
OpenSearch Alerting插件权限缺失漏洞(CVE-2026-19311)
CVE-2026-19311 · aws.amazon.com · 2026-08-13
OpenSearch Alerting Plugin 2.4.0 · OpenSearch Alerting Plugin 2.19.5 …
Read more
High
AWS Strands Agents Tools 多租户内存隔离绕过漏洞 (CVE-2026-1911)
CVE-2026-1911 · github.com · 2026-08-07
strands-agents-tools < 0.8.3
Read more
Medium
AWS DocumentDB MCP Server 权限绕过漏洞(CVE-2026-18954)
CVE-2026-18954 · github.com · 2026-08-06
Amazon AWS Labs DocumentDB MCP Server < 1.0.12
Read more
High
CVE-2026-18953: AWS Transform MCP Server 路径限制漏洞导致本地代码执行
CVE-2026-18953 · github.com · 2026-08-06
AWS Transform MCP Server <0.1.5
Read more
精品
High
CVE-2026-18830: Amazon Bedrock AgentCore输入验证绕过
CVE-2026-18830 · aws.amazon.com · 2026-08-05
Amazon Bedrock AgentCore harness InvokeHarness API versions before 2026-07-31
Read more
Unknown
CVE-2026-18655: AWS Amazon MQ MCP Server凭据泄露漏洞
CVE-2026-18655 · aws.amazon.com · 2026-08-04
aws-labs.amazon-mq-mcp-server <= 2.0.23
Read more
精品
High
存储型XSS漏洞修复: participant_url字段未验证危险URL协议导致账户接管
github.com · 2026-08-01
aws-ops-wheel
Read more

每篇文章经过自动 HTML→Markdown 清洗 + LLM 去噪 + 中英双语翻译。原始链接保留在文章末尾。

想看哪个安全博客 / 公告源？邮件告诉我们，每周新接 1-2 个。