@LetITFly 的频道，主题包括但不限于 Android、Windows、Web、消费电子相关，吹水为主。愿各位始终享有足够的信息渠道，在心情好有意愿的时候能够做想做的事情。本频道的原创信息均采用 CC BY-NC-SA 4.0 知识共享协议 发布；本频道所有 Forward 消息均按原消息的许可合理转载。友情链接：@TaborSpace@MATIFW (archived)@encmasutahttps://news.letitfly.mehttps://news.letitfly.me/posts/11387https://news.letitfly.me/posts/11387Tue, 18 Aug 2026 05:27:19 GMT<div class="tgme_widget_message_forwarded_from accent_color">Forwarded from <a class="tgme_widget_message_forwarded_from_name" href="https://t.me/landiansub/15970" target="_blank" rel="noopener"><span>蓝点网订阅频道</span></a></div><video src="/static/https://cdn5.telesco.pe/file/1aa8653d4c.mp4?token=RMUtENZTw9kiJ8rcajCqS_4mrZglmxC4ZLEQ_XmQzFGpJpHbTcVHQvQdRGUfU_0KkZoNSu65qS9WSyQxZwFT8ny2uTgyQ8Y7LrxcPxytdAv05Gf8Tn4kqlvCnJLr8Dm1bjAVCgfd8ZF1nPt8b-mG79WUXc-O27IMynXT_c-Hmdy6MbZfUuPmwXUhJeR9eb0IDu8mtYHkjui7G_8Q_KnNV9oAeL7TyTDQ_NQDvWkp-ReITKk4LFPSsD38WMxmv0wGXPkcR1oDdxk_MGEj87xRuKLm9tpDtYQPuO9QY0_J1BNUlvJSpcJ_2FRXZ1V5aKrSzLFp8FrugFUsb8OxLAnDiRfTYJle4pHcMKH6-HvFHpiCgpbVCetQcx3h6N5PmmgobQPq22N0uUIWAlE-lqLRr22JHALfdUIOX4PjroHrl0v-xngh0OKWovaPszwPWI7FBxGsw2DEarJHN4a_bJMYpIS4yViEfoUX5m2lo2gCdRnLGAEZbMld0BaMFZVWG9gpZWE0KPJA0pljtsDsKV3xaMAxPu17cAPMW86h5YZn2Sql6VCVTh1jCtQ5GDB9nhMEUDJptA6K4jbZ28LFpkveP2GdfsQ-hywBS97nUMjumUYEmD_WyI8bZWwxrG8gQB93EBMe9ORyR1tMg0zBHmrSO7USNaMlBkiHibWUu0vpgKg" class="tgme_widget_message_video js-message_video" width="100%" height="100%" controls preload="auto" playsinline webkit-playsinline></video><a href="/search/result?q=%23%E5%AE%89%E5%85%A8%E8%B5%84%E8%AE%AF" title="#安全资讯">#安全资讯</a> <b>安全公司 Nebula 发布 Android 远程 root 演示视频，只需点击恶意 URL 即可在不到 1 分钟内自动安装 su 二进制文件和获得持久化 root 权限。</b><br /><br />该漏洞利用 Firefox v151.0.2 及之前版本中存在的漏洞和 Linux 内核中存在的漏洞，可以直接在 Android 17 上提权，目前概念验证代码已经发布。<br /><br />查看全文：<a href="https://ourl.co/113840?t" target="_blank" rel="noopener" title="https://ourl.co/113840?t">https://ourl.co/113840?t</a><br /><br /><i class="emoji"><b>😁</b></i><a href="https://t.me/landiansub" target="_blank" rel="noopener" title="订阅">订阅</a> <i class="emoji"><b>🤔</b></i><a href="https://t.me/id7371" target="_blank" rel="noopener" title="解封">解封</a> <i class="emoji"><b>🥰</b></i><a href="https://x.com/intent/follow?screen_name=landiantech" target="_blank" rel="noopener" title="推特">推特</a> <i class="emoji"><b>🎉</b></i><a href="https://t.me/landiansub/15535" target="_blank" rel="noopener" title="CN2VPS">CN2VPS</a>https://news.letitfly.me/posts/11123https://news.letitfly.me/posts/11123Tue, 17 Mar 2026 15:37:03 GMT<div class="tgme_widget_message_forwarded_from accent_color">Forwarded from <a class="tgme_widget_message_forwarded_from_name" href="https://t.me/landiansub/14818" target="_blank" rel="noopener"><span>蓝点网订阅频道</span></a></div><div class="image-list-container image-list-even"> <button type="button" class="image-preview-button image-preview-wrap" popovertarget="modal-11123-0" popovertargetaction="show" aria-label="Open image preview: #安全资讯 360 安全龙虾不慎泄露通配符域名证书和私钥，可被用于劫持，目前等待吊销"> <img src="/static/https://cdn5.telesco.pe/file/siAYUGvvzRAyzs1tkg82YXROk06micCdIXzqgphW-AtCEZIvGpjXmNIwuYoWUnhra3dRyBG4fU_mET4bcnIvJ1Pc3JSsUJn4OyvBY4SrS9txo_lt5Q_e5B_5Yqu0_DtQjbSFuJXzDLmok4UdAU-PXNZhw3xwlrPq2pTLbKL-ICR1F4-JBBr-5E4mzwLW-v8azf1FgcMooC0JeKvrkWoo16mua7m2ApDMjW6c0BQJJqMOLOdQ-ILhqhQcwYzL3y2NgHDOFjLba6YFpI3pBYN46TM0dcV7SRQ1M5JV8Uo0T_E5G6h9jJek7_VM8-MCvOhRpBw66maxFKxyC9p4zcUhYQ.jpg" alt="#安全资讯 360 安全龙虾不慎泄露通配符域名证书和私钥，可被用于劫持，目前等待吊销" width="453" height="254" loading="eager" /> </button> <div class="modal" id="modal-11123-0" popover="auto" aria-label="Image preview"> <button type="button" class="modal__backdrop" popovertarget="modal-11123-0" popovertargetaction="hide" aria-label="Close image preview"></button> <button type="button" class="modal__close" popovertarget="modal-11123-0" popovertargetaction="hide" aria-label="Close image preview">×</button> <div class="modal__surface"> </div> </div> <button type="button" class="image-preview-button image-preview-wrap" popovertarget="modal-11123-1" popovertargetaction="show" aria-label="Open image preview: #安全资讯 360 安全龙虾不慎泄露通配符域名证书和私钥，可被用于劫持，目前等待吊销"> <img src="/static/https://cdn5.telesco.pe/file/uz0fwxoTISrpaK8emBp2xdomUMslX16qbRIVr7vSBKYRPn0h9dS6WHbmSVmn6xXRKRuC0xp7LYrrITeJgt-l4Xja2_llKugWbLzClK6ynmPfH179K3Cpqx0Z35fjRCihp1ELI3e6sI-oC2RroqtoXc3NhIOcMwoXbwBBzq26NUYMfEVSxBnj9KWRRjN0xlbs1PCOc0VTa7rprBpEb_qVqM80JekxH-USte2bO7gcr1e3UGx_l23kwPMO3RxetPvy6f1vC4C4a0X5UHAkOHpXZGfnq7myax8-6s2Mr3ktXQY5MfkXxq12kQ2r_Rgdo2sUtVurOO7zLKlXD1I_X8oGvA.jpg" alt="#安全资讯 360 安全龙虾不慎泄露通配符域名证书和私钥，可被用于劫持，目前等待吊销" width="453" height="256" loading="eager" /> </button> <div class="modal" id="modal-11123-1" popover="auto" aria-label="Image preview"> <button type="button" class="modal__backdrop" popovertarget="modal-11123-1" popovertargetaction="hide" aria-label="Close image preview"></button> <button type="button" class="modal__close" popovertarget="modal-11123-1" popovertargetaction="hide" aria-label="Close image preview">×</button> <div class="modal__surface"> </div> </div> </div><a href="/search/result?q=%23%E5%AE%89%E5%85%A8%E8%B5%84%E8%AE%AF" title="#安全资讯">#安全资讯</a> <b>360 安全龙虾不慎泄露通配符域名证书和私钥，可被用于劫持，目前等待吊销。</b><br /><br />360 安全龙虾使用定制版 360 浏览器并使用 myclaw[.]360[.]cn 作为入口，为达成 HTTPS 访问 360 工程师直接将通配符证书和私钥都放在本地导致泄露，要解决这个问题或许应该采用自签名证书或局域网 IP 明文访问。<br /><br />查看全文：<a href="https://ourl.co/112186?t" target="_blank" rel="noopener" title="https://ourl.co/112186?t">https://ourl.co/112186?t</a><br /><br /><b>更新: 蓝点网已就此事咨询360SRC团队，该团队回应称这是内部已知问题，目前正在处理中<br /><br /></b><img class="tg-emoji" src="/static/https://telegram.me/i/emoji/6318809216484116191.webp" alt="" loading="lazy" width="20" height="20" /><a href="https://t.me/landiansub" target="_blank" rel="noopener" title="订阅">订阅</a> <img class="tg-emoji" src="/static/https://telegram.me/i/emoji/6320807540212893327.webp" alt="" loading="lazy" width="20" height="20" /><a href="https://x.com/landiantech" target="_blank" rel="noopener" title="X">X</a> <img class="tg-emoji" src="/static/https://telegram.me/i/emoji/5168418482701730516.webp" alt="" loading="lazy" width="20" height="20" /><a href="https://t.me/id7371" target="_blank" rel="noopener" title="解封">解封</a> <img class="tg-emoji" src="/static/https://telegram.me/i/emoji/6318804835617474698.webp" alt="" loading="lazy" width="20" height="20" /><a href="https://t.me/landiansub/12423" target="_blank" rel="noopener" title="CN2VPS">CN2VPS</a>