Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile（前身是MobileIron Core）存在一个代码注入漏洞。该漏洞可能允许攻击者通过向受影响组件发送特制请求，在目标系统上执行任意代码。由于缺乏详细的漏洞技术细节和官方公告，目前
2026-05-10 归档
今日共收录 706 条安全情报，包含 57 个 CVE，372 篇安全通告，以及 20 篇研究论文。
← 返回归档列表【云防火墙】腾讯云 VPC 边界防火墙（集群模式）超量管控生效通知
腾讯云发布安全公告，通知用户其 VPC 边界防火墙（集群模式）即将实施超量管控策略。该策略旨在对超出预设配额（如连接数、带宽等）的防火墙实例进行限制或告警，以确保服务稳定性。公告未涉及具体漏洞或攻击，属于服务运维变更。用户需关注自身防火墙使
GrapheneOS before 2026050400 allows attackers to discover the real IP address of a VPN user as a...
CVE-2026-45182
GrapheneOS before 2026050400 allows attackers to discover the real IP address of a VPN user as a consequence of a regist
A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the...
CVE-2026-8190
A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the function wan of the file
free5GC's PCF npcf-policyauthorization POST /app-sessions panics on suppFeat=1 with missing AfRoutReq via nil pointer dereference
CVE-2026-44317
### Summary free5GC's PCF `POST /npcf-policyauthorization/v1/app-sessions` handler panics on a single authenticated requ
free5GC's NEF nnef-pfdmanagement API is unauthenticated; forged bearer tokens can read PFD data and create/delete PFD subscriptions
CVE-2026-44330
### Summary free5GC's NEF mounts the `nnef-pfdmanagement` route group without inbound OAuth2/bearer-token authorization.
free5GC's NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler
CVE-2026-44327
### Summary free5GC's NEF mounts the `nnef-oam` route group without inbound OAuth2/bearer-token authorization. A network
free5GC's NEF 3gpp-traffic-influence API is unauthenticated; missing or forged bearer tokens can create, read, patch, and delete subscriptions
CVE-2026-44326
### Summary free5GC's NEF mounts the `3gpp-traffic-influence` API without inbound OAuth2/bearer-token authorization. A n
free5GC's NEF 3gpp-pfd-management API is unauthenticated; forged bearer tokens can create, read, and delete PFD transactions
CVE-2026-44315
### Summary free5GC's NEF mounts the `3gpp-pfd-management` API without inbound OAuth2/bearer-token authorization. A netw
Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability
CVE-2026-44211
## Summary The `kanban` npm package (used by the `cline` CLI) starts a WebSocket server on `127.0.0.1:3484` with no Ori
LADDER: Multi-Objective Backdoor Attack via Evolutionary Algorithm.
本文提出了一种名为LADDER的新型多目标黑盒后门攻击方法，针对卷积神经网络（CNN），通过进化算法同时优化多个攻击目标。现有黑盒后门攻击通常将目标视为单目标优化问题，仅在单一域（如空间域）设计触发器，这会导致语义和鲁棒性受损，并引入视觉和
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
L-HAWK: A Controllable Physical Adversarial Patch Against a Long-Distance Target.
该论文提出了一种名为L-HAWK的可控物理对抗补丁，旨在针对远距离目标进行有效攻击。现有的物理对抗补丁通常对攻击距离敏感，当目标距离较远时，补丁在图像中的尺寸变小，导致攻击效果显著下降。L-HAWK通过优化补丁的形状、颜色和纹理，并引入可控
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
gitsign verify accepts signatures over go-git-normalized bytes, enabling trust confusion on malformed commits
CVE-2026-44309
## Summary `gitsign verify` and `gitsign verify-tag` re-encode commit/tag objects through go-git's `EncodeWithoutSignat
BaseBridge: Bridging the Gap Between Over-the-Air and Emulation Testing for Cellular Baseband Firmware.
现代蜂窝基带的测试主要依赖于两种方式：空中（Over-the-Air, OTA）测试和仿真测试。OTA测试虽然真实，但成本高、难以自动化且可重现性差；而仿真测试虽然可扩展性好，但由于基带中涉及DSP、SIM卡、射频前端等复杂外设的模拟支持有
Chimera: Fuzzing P4 Network Infrastructure for Multi-Plane Bug Detection and Vulnerability Discovery.
本文提出Chimera，一个针对P4可编程网络基础设施的模糊测试工具，旨在检测跨控制平面和数据平面的多平面漏洞。传统P4安全研究主要关注数据平面，忽略了与控制平面的交互。作者通过分析开源P4实现中的历史漏洞报告，发现许多漏洞源于两个平面之间
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud