Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in...
CVE-2026-45185
Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing p
2026-05-13 归档
今日共收录 822 条安全情报，包含 0 个 CVE，457 篇安全通告，以及 56 篇研究论文。
← 返回归档列表Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and...
CVE-2026-34686
Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a s
Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and...
CVE-2026-34655
Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a s
Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and...
CVE-2026-34658
Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a s
SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space...
CVE-2026-8430
SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space that is limited to certa
A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8...
CVE-2026-23819
A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an u
Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of...
CVE-2026-34659
Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulnerabili
Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect...
CVE-2026-34660
Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that c
sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)
CVE-2026-45091
In sealed-env enterprise mode, versions 0.1.0-alpha.1 through 0.1.0-alpha.3 embedded the operator's literal TOTP secret
Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via `found-action`
CVE-2026-45087
# GHSA: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode ## Summary When dalfox is start
protobuf.js: Denial of service from crafted field names in generated code
CVE-2026-44294
## Summary protobufjs generated JavaScript property accessors from schema-controlled field and oneof names. Certain con
Firewall for AI
Akamai 发布了名为 'Firewall for AI' 的新产品，旨在保护 AI 应用免受 DDoS 和 Botnet 攻击。该产品是 Akamai 安全解决方案的一部分，利用其全球分布式网络来检测和缓解针对 AI 工作负载的恶意流量
Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator
Fortinet has released security patches for two critical vulnerabilities in FortiSandbox and FortiAuthenticator that coul
Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
TeamPCP, the threat actor behind the recentsupply chain attack spree, has been linked to the compromise of the npm and P
Reconstruction of Personally Identifiable Information from Supervised Finetuned Models
本文首次系统研究监督微调（SFT）大型语言模型中的个人身份信息（PII）重建问题。SFT通过指令-响应对数据集将预训练知识适配到特定领域，但这些数据集常包含用户提供的敏感信息（如医疗和法律场景中的PII），存在隐私泄露风险。作者构建了多轮、
Adversarial SQL Injection Generation with LLM-Based Architectures
本文针对SQL注入（SQLi）攻击这一长期位列OWASP Top 10的安全威胁，探索利用大型语言模型（LLM）自动化生成对抗性SQL注入测试载荷的方法。作者提出了两种新型基于LLM的系统：RADAGAS（基于检索增强生成的对抗性SQLi生
CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms
CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms
CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud
CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud
CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection
CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection
Security & Identity
Security & Identity