SPIP BigUp Unauthenticated RCE(CVE-2024-8517)
CVE-2024-8517
SPIP BigUp Unauthenticated RCE(CVE-2024-8517)
2026-05-07 归档
今日共收录 722 条安全情报，包含 0 个 CVE，380 篇安全通告，以及 58 篇研究论文。
← 返回归档列表Rejetto HFS 远程命令执行漏洞(CVE-2024-39943)
CVE-2024-39943
Rejetto HFS 远程命令执行漏洞(CVE-2024-39943)
Apache HugeGraph-Server Command Execution In Gremlin（CVE-2024-27348）
CVE-2024-27348
Apache HugeGraph-Server Command Execution In Gremlin（CVE-2024-27348）
Zabbix 后台延时注入(CVE-2024-22120)
CVE-2024-22120
Zabbix 后台延时注入(CVE-2024-22120)
CrushFTP 认证绕过漏洞（CVE-2024-4040）
CVE-2024-4040
CrushFTP 认证绕过漏洞（CVE-2024-4040）
Alert for CVE-2026-21992
CVE-2026-21992
Alert for CVE-2026-21992
Alert for CVE-2025-61884
CVE-2025-61884
Alert for CVE-2025-61884
Alert for CVE-2025-61882
CVE-2025-61882
Alert for CVE-2025-61882
Alert for CVE-2024-21287
CVE-2024-21287
Alert for CVE-2024-21287
Alert for CVE-2022-21500
CVE-2022-21500
Alert for CVE-2022-21500
Alert for CVE-2021-44228
CVE-2021-44228
Alert for CVE-2021-44228
Linux 内核提权 CVE-2026-31431(copy-fail)
CVE-2026-31431
Linux 内核提权 CVE-2026-31431(copy-fail)
【安全通告】Linux Kernel 本地权限提升漏洞风险通告（CVE-2026-31431）
CVE-2026-31431
【安全通告】Linux Kernel 本地权限提升漏洞风险通告（CVE-2026-31431）
CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal (Severity: CRITICAL)
CVE-2026-0300
CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal (Se
FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header)
## Summary FileBrowser Quantum serves inline SVG files without a `Content-Security-Policy` header, allowing embedded Ja
Talos Linux has a local privilege escalation from untrusted workloads
### Summary A vulnerability in the Linux kernel's algif_aead subsystem (CVE-2026-31431, "copy.fail") allows an unprivil
webauthn-rs-core/webauthn-authenticator-rs: Origin validation mismatch possible when subdomains are allowed
### Summary `webauthn-rs-core` ([Relying Party][rp]) and `webauthn-authenticator-rs` ([client][]) checked that [an `Ori
Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution
CVE-2026-0300
Palo Alto Networks has released an advisory warning that a critical buffer overflow vulnerability in its PAN-OS software
Probabilistic Atomic Swaps for Bitcoin and Friends
本文提出了一种名为“概率互换”（Probabilistic Swaps）的新型密码学原语，旨在将区块链中的原子互换从确定性场景扩展到概率性场景。传统原子互换保证“要么双方都获得约定资产，要么都不转移”，但这种全有或全无的确定性限制了彩票、随
Revocation-Ready CP-ABE Key Management for Blockchain-Based IoT Data Sharing
本文提出了一种面向区块链物联网数据共享系统的、支持撤销的CP-ABE密钥管理方案。现有混合架构中，许可链存储防篡改元数据，加密负载置于内容寻址存储，但密钥访问控制存在瓶颈：常见方案依赖在线RBAC或智能合约返回密钥，引入可信在线策略执行点并