<?xml version="1.0" encoding="UTF-8"?><rss xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title>NOSEC 安全讯息平台 - 漏洞预警</title><link>https://nosec.org/home/index/hole.html</link><atom:link href="http://rsshub.zhengjim.com/nosec/hole" rel="self" type="application/rss+xml"></atom:link><description>NOSEC 安全讯息平台 - 漏洞预警 - Powered by RSSHub</description><generator>RSSHub</generator><webMaster>contact@rsshub.app (RSSHub)</webMaster><language>en</language><lastBuildDate>Fri, 18 Sep 2026 12:17:44 GMT</lastBuildDate><ttl>5</ttl><item><title>【已支持检测】GitLab 仓库提交 API 路径遍历漏洞可导致任...</title><description>▌漏洞描述&amp;nbsp; &amp;nbsp; &amp;nbsp; GitLab 是全球广泛使用的开源 DevSecOps 平台，提供源码托管、CI/CD 流水线...</description><link>https://nosec.org/home/detail/6337.html</link><guid isPermaLink="false">https://nosec.org/home/detail/6337.html</guid><pubDate>Mon, 14 Sep 2026 03:47:14 GMT</pubDate><author>匿名者</author></item><item><title>【已支持检测】JeecgBoot 积木报表 /jmreport/auto/export...</title><description>▌漏洞描述&amp;nbsp; &amp;nbsp; &amp;nbsp; JeecgBoot 是面向企业信息化场景的低代码开发平台，内置 JimuReport（积木...</description><link>https://nosec.org/home/detail/5981.html</link><guid isPermaLink="false">https://nosec.org/home/detail/5981.html</guid><pubDate>Wed, 02 Sep 2026 08:58:05 GMT</pubDate><author>匿名者</author></item><item><title>【已支持检测】Nacos 鉴权作用域错配权限绕过可导致管理员...</title><description>▌漏洞描述&amp;nbsp; &amp;nbsp; &amp;nbsp; Nacos 是面向云原生和微服务平台的服务发现、配置管理与服务管理平台，常用...</description><link>https://nosec.org/home/detail/5980.html</link><guid isPermaLink="false">https://nosec.org/home/detail/5980.html</guid><pubDate>Wed, 02 Sep 2026 08:53:54 GMT</pubDate><author>匿名者</author></item><item><title>【漏洞预警】Next.js Windows 托管应用未认证远程代码执行...</title><description>▌漏洞描述&amp;nbsp; &amp;nbsp; &amp;nbsp; Next.js 是 Vercel 维护的 React Web 应用框架，常用于企业官网、业务门户...</description><link>https://nosec.org/home/detail/5979.html</link><guid isPermaLink="false">https://nosec.org/home/detail/5979.html</guid><pubDate>Wed, 02 Sep 2026 08:51:05 GMT</pubDate><author>匿名者</author></item><item><title>【漏洞预警】Redis 又双叒爆高危 TLS Pending-List UAF 漏...</title><description>▌漏洞描述&amp;nbsp; &amp;nbsp; &amp;nbsp; Redis 常被用于缓存、会话管理、消息队列和实时业务数据处理，部分企业会为...</description><link>https://nosec.org/home/detail/5978.html</link><guid isPermaLink="false">https://nosec.org/home/detail/5978.html</guid><pubDate>Wed, 02 Sep 2026 08:46:31 GMT</pubDate><author>匿名者</author></item><item><title>【已支持检测】Red Hat Build of Keycloak 重置凭据流程漏...</title><description>▌漏洞描述&amp;nbsp; &amp;nbsp; &amp;nbsp; Red Hat Build of Keycloak 是 Red Hat 提供的身份与访问管理平台，常用于...</description><link>https://nosec.org/home/detail/5977.html</link><guid isPermaLink="false">https://nosec.org/home/detail/5977.html</guid><pubDate>Wed, 02 Sep 2026 08:41:41 GMT</pubDate><author>匿名者</author></item><item><title>【漏洞预警】Microsoft SharePoint CVE-2026-55040+63520...</title><description>▌漏洞描述&amp;nbsp; &amp;nbsp; &amp;nbsp; Microsoft SharePoint 是企业常用的协作与文档管理平台，通常承载内部文件...</description><link>https://nosec.org/home/detail/5975.html</link><guid isPermaLink="false">https://nosec.org/home/detail/5975.html</guid><pubDate>Tue, 25 Aug 2026 06:44:21 GMT</pubDate><author>匿名者</author></item><item><title>【漏洞预警】GitLab CE/EE NPM 包注册表路径遍历漏洞可导致...</title><description>▌漏洞描述&amp;nbsp; &amp;nbsp; &amp;nbsp; GitLab CE/EE 是企业常用的代码托管与协作平台，NPM 包注册表常用于管理和...</description><link>https://nosec.org/home/detail/5974.html</link><guid isPermaLink="false">https://nosec.org/home/detail/5974.html</guid><pubDate>Tue, 25 Aug 2026 06:37:38 GMT</pubDate><author>匿名者</author></item><item><title>【已支持检测】MLflow Webhook SSRF 漏洞可导致未授权读取...</title><description>▌漏洞描述&amp;nbsp; &amp;nbsp; &amp;nbsp; MLflow 是开源 AI 工程平台，常用于机器学习模型、智能体和大语言模型的实...</description><link>https://nosec.org/home/detail/5973.html</link><guid isPermaLink="false">https://nosec.org/home/detail/5973.html</guid><pubDate>Tue, 25 Aug 2026 06:34:00 GMT</pubDate><author>匿名者</author></item><item><title>【漏洞预警】PostgreSQL to_char 堆缓冲区溢出漏洞可导致远...</title><description>▌漏洞描述&amp;nbsp; &amp;nbsp; &amp;nbsp; PostgreSQL 是广泛用于业务系统、数据分析和关键应用的数据管理平台，通常...</description><link>https://nosec.org/home/detail/5971.html</link><guid isPermaLink="false">https://nosec.org/home/detail/5971.html</guid><pubDate>Wed, 19 Aug 2026 02:54:12 GMT</pubDate><author>匿名者</author></item></channel></rss>