Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4. In app/Http/Controllers...
CVE-2026-37504
Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4. In app/Http/Controllers/Server/UniProxyControlle
2026-05-02 归档
今日共收录 1052 条安全情报，包含 324 个 CVE，429 篇安全通告，以及 17 篇研究论文。
← 返回归档列表AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22)...
CVE-2026-37531
AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a TOCTOU rac
Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache...
CVE-2026-42472
Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize
Integer underflow vulnerability in Open-SAE-J1939 thru commit...
CVE-2026-37534
Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in S
Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25...
CVE-2026-23866
Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and
Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache...
CVE-2026-42473
Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can...
CVE-2026-22166
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash
In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items...
CVE-2026-43046
In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with drop_progress and zer
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix soft lockup in...
CVE-2026-43029
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix soft lockup in mptcp_recvmsg() syzbot r
In the Linux kernel, the following vulnerability has been resolved: HID: core: Mitigate...
CVE-2026-43048
In the Linux kernel, the following vulnerability has been resolved: HID: core: Mitigate potential OOB by removing bogus
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: fix race...
CVE-2026-43023
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: fix race conditions in sco_sock_con
Kirby CMS's `pages.access/list` and `files.access/list` permissions are not consistently checked in the Panel and REST API
CVE-2026-42137
### TL;DR This vulnerability affects all Kirby sites where users of a particular role have no permission to access or l
OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter
CVE-2026-42191
### Summary The OTLP disk retry feature in `OpenTelemetry.Exporter.OpenTelemetryProtocol` silently fell back to `Path.G
n8n-mcp's IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders
CVE-2026-42449
### Impact In the SDK embedder path (`N8NDocumentationMCPServer` constructor, `getN8nApiClient()`, and `validateInstanc
Weblate Doesn't Invalidate API Token on Password Change
CVE-2026-41519
### Impact When a user changes their password, browser sessions are correctly invalidated via `cycle_session_keys()`, bu
Gotenberg has ExifTool stdin argument injection via metadata value newlines (bypass of key sanitization fix)
CVE-2026-40281
## Vulnerability Details **CWE**: CWE-20 - Improper Input Validation The metadata value sanitization introduced in v8.
Gotenberg Vulnerable to Unauthenticated SSRF via Unfiltered Webhook URL
CVE-2026-39383
# CVE Report — Unauthenticated SSRF via Unfiltered Webhook URL in Gotenberg ## Severity | Field | Value
Firewall for AI
Akamai 安全研究团队发布了针对人工智能环境的安全产品“Firewall for AI”，旨在保护 AI 工作负载免受分布式拒绝服务（DDoS）攻击和僵尸网络（botnet）的威胁。随着企业广泛采用 AI 模型和基础设施，攻击者开始将目
FlashRT: Towards Computationally and Memory Efficient Red-Teaming for Prompt Injection and Knowledge Corruption
该论文提出 FlashRT，首个针对长上下文大语言模型（如 Gemini-3.1-Pro 和 Qwen-3.5）中提示注入和知识破坏攻击的优化红队框架。现有基于优化的红队方法虽然攻击效果好，但计算和内存开销巨大，尤其对于长上下文场景（如 3
The npm Threat Landscape: Attack Surface and Mitigations (Updated May 1)
Unit 42 发布了关于 npm 软件供应链安全威胁的最新分析，重点讨论了自 Shai Hulud 攻击以来 npm 生态系统面临的演变威胁。文章指出，攻击者正利用 npm 包管理器作为初始感染向量，通过将恶意包上传到公共仓库，诱骗开发者