A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks...
CVE-2026-0264
A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows a
2026-05-14 归档
今日共收录 1527 条安全情报，包含 720 个 CVE，444 篇安全通告，以及 62 篇研究论文。
← 返回归档列表An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on...
CVE-2026-0237
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly
SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIs
CVE-2026-45371
### Summary SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIs `POST /api/graph/getGraph`, `P
Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false
CVE-2026-44774
## Summary There is a medium severity vulnerability in Traefik's Kubernetes Gateway API provider that allows a tenant w
APPATCH: Automated Adaptive Prompting Large Language Models for Real-World Software Vulnerability Patching.
本文提出了一种名为APPATCH的自动化漏洞修补系统，利用大型语言模型（LLMs）在无需测试输入、漏洞利用证据以及模型训练或微调的情况下，实现对真实世界软件漏洞的自动化修补。核心挑战在于如何有效引导LLMs推理易受攻击的代码行为，以生成高质
Reinforcement Unlearning.
本文首次系统性地研究了强化学习中的机器遗忘问题，即“强化遗忘”。传统机器遗忘研究主要关注监督学习和无监督学习，而强化学习领域中，智能体在与环境交互过程中会记忆环境特征，引发隐私风险。根据数据保护法规，环境所有者有权撤销智能体对训练数据的访问
Towards a Rigorous Statistical Analysis of Empirical Password Datasets.
本文针对密码安全领域的关键问题——攻击者猜测曲线（即攻击者在给定猜测次数G内破解随机用户密码的概率λ_G）进行严格的统计分析。由于攻击者的猜测策略和用户密码分布均未知，作者遵循Kerckhoffs原则，假设攻击者知晓密码分布，并基于未知分布
Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence.
本文首次提出了一种具有可证明保证的黑盒攻击新范式——可认证黑盒攻击，该攻击能够在查询目标模型之前就保证对抗样本的攻击成功概率（ASP）。与传统的基于查询或迁移性的经验性黑盒攻击不同，这种新攻击揭示了机器学习模型在理论层面上的显著脆弱性。作者
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Microsoft May 2026 Patch Tuesday, (Tue, May 12th)
微软于2026年5月12日发布了本月的安全更新（Patch Tuesday），共修复了137个安全漏洞，涉及Windows、Office、Exchange Server、.NET Framework、Visual Studio等多个核心产品
Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator
Fortinet 发布了安全补丁，修复了 FortiSandbox 和 FortiAuthenticator 中的两个严重远程代码执行（RCE）漏洞。这些漏洞可能允许未经身份验证的攻击者通过特制请求在受影响设备上执行任意命令或代码。Fort
CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled (Severity: HIGH)
CVE-2026-0265
CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled (Severity: HIGH)
CustomProcessingUnit: Reverse Engineering and Customization of Intel Microcode.
本文提出首个针对Intel微码的静态与动态分析框架。微码是x86处理器指令集下的抽象层，用于将复杂指令分解为微操作，但厂商对其细节保密，且微码补丁经过签名加密，阻碍了独立审计与定制。近期研究已成功恢复Intel Goldmont（Atom）
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configured interface, which is proc...
CVE-2026-45158
OPNsense 是一款基于 FreeBSD 的防火墙及路由平台。在其 26.1.8 之前的版本中，存在一个严重的安全漏洞：接口 DHCP 配置功能未能正确过滤用户输入，未经过消毒的用户数据直接被传递到 Shell 脚本中处理。攻击者可以利
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE) vulnerability in the OPNsense core allows a user with us...
CVE-2026-44194
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE)
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restore_config_section fails to sanitize user supplied input leading to Re...
CVE-2026-44193
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restore_config_se
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API (DELETE /api/v...
CVE-2026-42048
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to
A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables...
CVE-2026-0243
A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attac