Semantic-Informed Driver Fuzzing Without Both the Hardware Devices and the Emulators.

这篇论文针对内核驱动测试的痛点——绝大多数驱动因缺乏对应硬件或模拟器而无法被有效测试——提出了一种无需硬件设备和模拟器的语义感知驱动模糊测试方法。当前驱动测试高度依赖物理设备或硬件模拟器，导致覆盖范围严重受限，大量驱动（如Linux内核中数

历史摘要 · 未重新核验 · NDSS

MobFuzz: Adaptive Multi-objective Optimization in Gray-box Fuzzing.

灰盒模糊测试（CGF）是一种高效的软件测试技术，但现有方法难以同时优化多个目标。本文提出MobFuzz，一种基于多目标优化（MOO）的自适应灰盒模糊器。首先，将多目标优化过程建模为多人多臂老虎机（MPMAB）问题，自适应选择当前最合适的客观

历史摘要 · 未重新核验 · NDSS

Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs

CVE-2026-47243

### Summary In the runtime-rs standalone virtio-fs path, verified here with QEMU (and verified with Cloud Hypervisor to

历史摘要 · 未重新核验 · GitHub Advisory

A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing a long...

CVE-2026-8362

A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing a long URL path starting with

历史摘要 · 未重新核验 · GitHub Advisory

A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long...

CVE-2026-8363

A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long URL path starting with

历史摘要 · 未重新核验 · GitHub Advisory

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18...

CVE-2026-4868

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 1

历史摘要 · 未重新核验 · GitHub Advisory

Symfony has XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true

CVE-2026-45071

### Description `symfony/dom-crawler` provides the `Crawler` class for navigating HTML/XML documents with CSS/XPath sel

历史摘要 · 未重新核验 · GitHub Advisory

Symfony's OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims

CVE-2026-45069

### Description `OidcTokenHandler` is Symfony's built-in access-token handler for OpenID Connect: it validates a bearer

历史摘要 · 未重新核验 · GitHub Advisory

Symfony has an HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URL-Parser Differentials and <area> Misclassification

CVE-2026-45066

### Description `symfony/html-sanitizer` lets applications sanitise untrusted HTML. The configuration methods `allowLin

历史摘要 · 未重新核验 · GitHub Advisory

Symfony's HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofing

CVE-2026-45064

### Description `Symfony\Component\HtmlSanitizer\TextSanitizer\UrlSanitizer::parse()` (used by `UrlSanitizer::sanitize(

历史摘要 · 未重新核验 · GitHub Advisory

Langroid has Prompt to SQL Injection, Leading to RCE

CVE-2026-25879

# Security Vulnerability Report: Prompt to SQL Injection leading to RCE in latest Langroid ## Affected Scope langroid @

历史摘要 · 未重新核验 · GitHub Advisory

SpSoft AppLock (com.sp.protector.free) 7.9.40 for Android allows a local attacker with physical...

CVE-2025-68712

SpSoft AppLock (com.sp.protector.free) 7.9.40 for Android allows a local attacker with physical access to bypass fingerp

历史摘要 · 未重新核验 · GitHub Advisory

LiquidJS is Vulnerable to Remote Code Execution

CVE-2026-45618

### Summary It is possible to execute arbitrary code with crafted templates ### Details `1|valueOf` -> `this` when

历史摘要 · 未重新核验 · GitHub Advisory

LiquidJS Vulnerable to ReDoS via Quadratic Backtracking in `strip_html` Filter Regex

CVE-2026-45617

## Summary The built-in `strip_html` filter in liquidjs uses a regex containing four lazy-quantified alternatives. When

历史摘要 · 未重新核验 · GitHub Advisory

Kirby CMS vulnerable to cross-site scripting (XSS) from links in KirbyTags and image blocks in the site frontend

CVE-2026-45368

### TL;DR This vulnerability affects all Kirby sites that allow the use of the `(link: …)` KirbyTag, the `link:` parame

历史摘要 · 未重新核验 · GitHub Advisory

Kirby CMS's content locks disclose IDs and emails of inaccessible users from `users.access/list` permissions

CVE-2026-45334

### TL;DR This vulnerability affects all Kirby sites that restrict the visibility of users for certain roles via the `u

历史摘要 · 未重新核验 · GitHub Advisory

Pimcore: Missing Authorization in WebDAV MOVE via unchecked asset move handling

CVE-2026-45260

### Summary Pimcore's WebDAV asset endpoint exposes a `MOVE` operation through `/asset/webdav{path}` without adding an a

历史摘要 · 未重新核验 · GitHub Advisory

Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection

CVE-2026-45065

### Description Symfony routes can declare a requirements regex per path parameter, e.g. a route `/{_locale}/blog` with

历史摘要 · 未重新核验 · GitHub Advisory

Symfony Vulnerable to Identity Spoofing via Unanchored DN Regex in X509Authenticator

CVE-2026-45063

### Description `X509Authenticator` implements client-certificate (mTLS) authentication: the web server validates the c

历史摘要 · 未重新核验 · GitHub Advisory

Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows...

CVE-2026-47119

Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arb

历史摘要 · 未重新核验 · GitHub Advisory