Veritas: A Semantically Grounded Agentic Framework for Memory Corruption Vulnerability Detection in Binaries
本文提出 Veritas，一个基于语义的二进制内存破坏漏洞检测框架。针对剥离二进制文件中恢复对象语义、跨过程传播和可行触发条件的难点，Veritas 结合了三个关键组件：首先，一个基于 RetDec 提升的 LLVM IR 的静态切片器，重
2026-05-16 归档
今日共收录 1030 条安全情报，包含 296 个 CVE，439 篇安全通告，以及 15 篇研究论文。
← 返回归档列表PickleFuzzer: A Case Study in Fuzzing for Discrepancies Between Python Pickle Implementations
Python 的原生序列化协议 pickle 虽然功能强大，但由于存在已知的安全风险，在处理不可信数据时非常不安全。它常被用于保存机器学习模型等场景，但攻击者可能通过构造恶意的 pickle 数据来执行任意代码。开发者有时会通过限制反序列化
网络安全信息与动态周报-2026年第13期
本报告为CNCERT（国家互联网应急中心）发布的2026年第13期网络安全信息与动态周报。报告综合了2026年4月13日至4月18日（或当周）的网络安全态势，内容涵盖漏洞威胁、恶意程序传播、事件处置、监测数据统计等方面。报告通常包括境内被篡
rkyv: Panic safety bugs in `InlineVec::clear` and `SerVec::clear` enable arbitrary code execution
`InlineVec::clear()` and `SerVec::clear()` in `rkyv` were not panic-safe. Both functions iterate over their elements and
Apache Camel JMS 反序列化(CVE-2026-40860)漏洞分析
CVE-2026-40860
Apache Camel JMS 反序列化(CVE-2026-40860)漏洞分析
[原创]从POC到EXP：从0基础到v8 CVE-2021-38003复现
CVE-2021-38003
[原创]从POC到EXP：从0基础到v8 CVE-2021-38003复现
Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access
CVE-2026-20182
Cisco has released updates to address a maximum-severity authentication bypass flaw in Catalyst SD-WAN Controller that i
CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits
CVE-2026-20182
The U.S.Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly disclosed vulnerability impact
Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026
CVE-2026-20182
The zero-day, tracked as CVE-2026-20182, has been exploited in targeted attacks by a sophisticated threat actor identifi
Analyzing Codes of Conduct for Online Safety in Video Games at Scale
本文研究了大型在线游戏中行为准则（Codes of Conduct, CoCs）的现状与有效性，以应对玩家面临的骚扰、歧视、不当内容、隐私泄露、作弊等在线危害。作者提出了 CONDUCTIFY 流水线，用于大规模识别和分析游戏内的行为准则。
The Essential Chat Support plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.1. This is due to the plugin not properly verifyi...
CVE-2026-8681
该漏洞影响WordPress Essential Chat Support插件（所有版本 ≤ 1.0.1）。漏洞本质是授权绕过：插件在处理请求时未正确验证用户权限，导致未认证攻击者通过发送包含参数 ecs_reset_settings=1
Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified.
CVE-2026-8704
CVE-2026-8704 影响 Perl 的 Crypt::DSA 模块（版本 1.19 及更早）。该漏洞源于模块在打开文件时使用了不安全的两参数 open 调用（2-args open），导致攻击者可能通过构造特殊输入覆盖或修改系统中已
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, GET /api/v1/memories/ef is accessible without authentication a...
CVE-2026-45667
CVE-2026-45667 是 Open WebUI 中的一个严重漏洞。Open WebUI 是一个自托管的离线人工智能平台，版本 0.8.0 之前，其 GET /api/v1/memories/ef 端点无需身份验证即可访问，并且会调用
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in th...
CVE-2026-45665
Open WebUI 是一个自托管的离线 AI 平台。在版本 0.8.0 之前，其横幅组件存在存储型跨站脚本（XSS）漏洞，根因是内容净化顺序不当：DOMPurify 在 marked 库之前执行，导致恶意管理员可在全局横幅中植入 Java
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.11, there is a blind server side request forgery (SSRF) via the P...
CVE-2026-45347
Open WebUI 是一个自托管的人工智能平台，设计为完全离线运行。在版本 0.5.11 之前，其 PDF 生成功能存在盲服务器端请求伪造（SSRF）漏洞。当导出 PDF 时，用户输入被解释为 HTML 并嵌入 PDF 中。虽然脚本和某些
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting vulnerability in Open WebUI S...
CVE-2026-45346
CVE-2026-45346 是一个影响 Open WebUI 的跨站脚本（XSS）漏洞。Open WebUI 是一个自托管的离线人工智能平台。该漏洞存在于 SVG 渲染器实现中，攻击者可以通过上传包含恶意 JavaScript 的 SVG
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a Server-Side Request Forgery (SSRF) vulnerability exists in _...
CVE-2026-45338
Open WebUI 是一个自托管的人工智能平台，设计用于完全离线运行。在其 0.9.0 版本之前，后端文件 backend/open_webui/utils/oauth.py 中的 _process_picture_url() 函数（约第
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.3.16, a missing permission check in all files related API endpoints...
CVE-2026-45301
CVE-2026-45301 存在于 Open WebUI（一个自托管、离线运行的 AI 平台）中。在 0.3.16 之前版本，所有与文件上传、查看、删除相关的 API 端点均未实施充分的权限验证。这意味着任何经过身份验证的用户（无论角色或
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, the profile_image_url field on the user profile update form ac...
CVE-2026-45299
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, the p
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, in standard channels (i.e., channels whose channel.type is nei...
CVE-2026-44571
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, in st