Hi-Res: Precise Exploit Detection Using Object-Granular Memory Monitoring.
内核级漏洞利用攻击持续存在，传统检测方法依赖专家手工设计的监控器，难以应对攻击者利用未监控的低级操作构建的“怪机器”（weird machines）。本文提出 Hi-Res，一个可编程的检测框架，通过系统性地从低级内存操作推导出高级视图，从
2026-05-15 归档
今日共收录 1277 条安全情报，包含 487 个 CVE，424 篇安全通告，以及 55 篇研究论文。
← 返回归档列表Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Microsoft Exchange Server Spoofing Vulnerability
CVE-2026-42897
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows
Open WebUI vulnerable to stored XSS via OAuth picture claim stored as SVG data URI in profile_image_url
# Summary When a user signs in via OAuth, Open WebUI fetches the `picture` claim URL, infers a MIME type from the URL e
Siemens Industrial Devices
CVE-2025-40833
View CSAF Summary Multiple industrial devices contain a vulnerability that could allow an attacker to cause a denial of
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan's Bazaar (community marketplace) renders the name and version fields of a package's plugin....
CVE-2026-45375
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan's Bazaar (community marketplace) r
The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1...
CVE-2026-8181
The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulne
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configured interface, which is proc...
CVE-2026-45158
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE) vulnerability in the OPNsense core allows a user with us...
CVE-2026-44194
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE)
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restore_config_section fails to sanitize user supplied input leading to Re...
CVE-2026-44193
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restore_config_se
Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts
CVE-2026-45675
## Summary The LDAP and OAuth authentication flows use a TOCTOU (Time-of-Check-Time-of-Use) pattern for first-user admi
Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed
CVE-2026-45672
### Summary The `/api/v1/utils/code/execute` endpoint executes arbitrary Python code via Jupyter for any verified user,
Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)
CVE-2026-45667
### Summary GET `/api/v1/memories/ef` is accessible without authentication and executes `request.app.state.EMBEDDING_FUN
Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints
CVE-2026-45402
# Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints ## Summary Mult
Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls
CVE-2026-45398
# IDOR: Retrieval API Bypasses Knowledge Base Access Controls **Author:** Andrew Orr ## Summary `_validate_collectio
Open WebUI Vulnerable to Unauthenticated RAG Configuration Disclosure
CVE-2026-45397
**Vulnerability Type:** Information Disclosure / Missing Authentication **Severity:** Medium **Component:** `backend
DynSQL: Stateful Fuzzing for Database Management Systems with Complex and Valid SQL Query Generation.
该论文提出了一种名为DynSQL的有状态模糊测试方法，专门针对数据库管理系统（DBMS）进行测试。传统的DBMS模糊测试通常只生成简单的SQL查询，难以发现与复杂状态相关的深层漏洞。DynSQL的核心创新在于能够自动生成复杂且语义有效的SQ
Prεεmpt: Sanitizing Sensitive Prompts for LLMs.
本文提出名为 Prεεmpt 的框架，旨在解决大语言模型（LLM）输入提示中包含的敏感信息泄露风险。现有方法要么依赖手动规则，要么无法在隐私保护与模型效用之间取得良好平衡。Prεεmpt 采用基于强化学习的智能清洗机制，能够自动识别提示中的