Protecting IoT Devices through Localized Detection of BGP Hijacks for Individual Things.
该论文提出了一种针对物联网（IoT）设备的BGP（边界网关协议）劫持检测方法，旨在从单个家庭或小型企业等边缘节点的角度识别控制平面攻击。传统上，BGP路由劫持被视为大规模系统问题，需要网络服务提供商采取行动，但小型实体也可能成为攻击目标，例
2026-05-31 归档
今日共收录 804 条安全情报，包含 64 个 CVE，387 篇安全通告，以及 99 篇研究论文。
← 返回归档列表Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Admidio: Authorization bypass in file_delete enables cross-folder file removal by authenticated users without delete privileges
CVE-2026-47226
### Summary An authenticated Admidio member with upload rights on **any one folder** can permanently delete files from
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated...
CVE-2018-25412
Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload maliciou
The GEO my WP plugin for WordPress is vulnerable to SQL Injection via the 'swlatlng' and ...
CVE-2026-9757
The GEO my WP plugin for WordPress is vulnerable to SQL Injection via the 'swlatlng' and 'nelatlng' parameters in all ve
PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership
CVE-2026-47405
### Summary PraisonAI Platform has a broken workspace authorization check that allows any authenticated low-privilege w
PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)
CVE-2026-47392
## Summary `execute_code()` in `praisonaiagents/tools/python_tools.py` (v1.6.37, subprocess sandbox mode) can be fully
PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context
CVE-2026-47395
### Summary PraisonAI's direct-prompt CLI automatically expands `@url:` mentions in raw prompt text before agent execut
PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default
CVE-2026-47393
### Summary CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a code-generator (`praisonai.deploy.api
Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024
CVE-2026-47233
## Summary Commit `d37ca6b27b9674238e58491cf7ba292e66898f15` ("Delete item not check admin rights #2024", 2026-04-12) a
Admidio PKCS#12 private key export action lacks CSRF protection
CVE-2026-47232
## Summary The sensitive `mode=export` action in `modules/sso/keys.php` exports a PKCS#12 bundle containing the configu
Admidio: CSRF in SSO client `enable` action toggles SAML/OIDC clients without token validation
CVE-2026-47229
## Summary `modules/sso/clients.php` validates an `adm_csrf_token` on every state-changing branch except `enable`. The
Admidio's CSRF in registration `send_login` mode resets arbitrary user passwords
CVE-2026-47228
## Summary `modules/registration.php` mode `send_login` regenerates a random password for `user_uuid_assigned`, stores
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8