本文提出了一种名为DNSBomb的新型脉冲式拒绝服务（DoS）攻击。攻击者利用DNS协议中多个固有的良性机制（如超时、查询聚合、响应快速返回）将其转化为恶意攻击向量。具体而言，攻击者以低速率发送大量DNS查询，借助查询聚合和响应放大机制，使得所有DNS响应在短时间内汇聚成一个高强度的周期性脉冲信号，从而同时冲击目标系统。作者在10种主流DNS软件、46个公共DNS服务以及约180万个开放DNS解析器上进行了广泛评估，结果表明所有DNS解析器均可被利用来发起比以往脉冲DoS攻击更实用、更强大的DNSBomb攻击。小规模实验显示，峰值脉冲幅度可达8.7 Gb/s，带宽放大因子超过20,000倍。受控攻击导致了无状态和有状态连接（TCP、UDP、QUIC）的完全丢包或服务降级。此外，作者提出了有效的缓解方案并进行了详细评估。已向所有受影响厂商负责任地披露了发现，其中24家厂商已确认并正在修补其软件（如BIND、Unbound、PowerDNS、Knot），并分配了10个CVE编号。

A vulnerability was determined in GL.iNet MT3000 up to 4.4.5. This vulnerability affects unknown code of the file ovpnclient.sh of the component OpenVPN Client Import Workflow. This manipulation causes command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 4.9.0_beta3-1012-0513-1778656146 is able to resolv

The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.4.7. This is due to insufficient input sanitization in the get_rest_route() function and missing output escaping in the column_default() method of the debug log list table. When the 'Disable REST API for non-logged in users' feature (aiowps_disa

The Event Monster – Event Management, Events Calendar, Tickets plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in versions up to, and including, 2.1.0. This is due to the capture_payment() AJAX handler (registered via wp_ajax_nopriv_em_capture_payment) trusting client-supplied payment data — including transaction ID, amount, and payment status — without perform

An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenticated administrators can leverage this exposure to obtain underlying terminal script code processing execution permissions.

An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processing behavior controls.

A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). On affected platforms, an administrative account logged into the user interface can exploit this input handling behavior to execute arbitrary platform shell commands.

An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). This issue uniquely affects version 17.4.0; earlier software releases are not exposed.

A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to insecure input validation. This issue uniquely affects version 17.4.0; earlier software releases are not exposed.

### Impact Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via crafted `data-mce-*` attributes, which are executed when content is rendered. Impacts users of TinyMCE with the media plugin enabled. ### Patches This vulnerability has been patched in TinyMCE 8.5.1, TinyMCE 7.9.3 and TinyMCE 5.11.1 LTS by ensuring that, when using the media plugin, any content wit

### Impact Stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass sanitization and inject scripts that execute when content is restored. Impacts users who utilize the protect option. ### Patches Patched by validating decoded mce:protected content against configured protect regex rules before restoring. Users should upgrade to the latest patched version. ### Workar

### Impact Stored XSS vulnerability via unsanitized data-mce-* attributes (data-mce-href, data-mce-src, data-mce-style). Allows attackers to inject malicious values that override safe attributes during serialization, bypassing validation. ### Patches Patched by stripping unsafe data-mce-* attributes during parsing. Users should upgrade to the latest patched versions (5 LTS, 7.x, 8.x). ### Workar

Ivanti Endpoint Manager Mobile代码注入漏洞

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to and including 1.9.4. This is due to a logic conflation in HippooPermissions::get_user_permissions(), which returns the same null sentinel for both administrators and unauthenticated visitors — a value that HippooPermissions::has_role_acce

## 1. Summary The Binary Stream Capture (BSC) component exposes an unauthenticated HTTP API for dynamically creating packet capture “handlers.” Because the code blindly trusts path‑related form fields, a remote client can: - **Bypass the configured log root** and direct BSC to log to **arbitrary filesystem paths** (path traversal / directory escape), and - **Append attacker‑controlled data** to

Mandiant 于2026年6月7日发布报告，披露了一起针对 KnowledgeDeliver 产品的 ViewState 反序列化漏洞的野外利用事件。攻击者利用该漏洞实现远程代码执行，进而控制目标系统。Mandiant 将此次攻击归因于疑似 APT 组织，但未公开具体归属。报告中未提供 CVE 编号、恶意软件家族或具体 IOC，但强调了漏洞在攻击链中的关键作用。建议相关组织立即排查 KnowledgeDeliver 的 ViewState 配置，并实施安全加固。

本文探讨了AI Agent在调用外部工具（Tool Call）时面临的供应链劫持风险。核心问题是：当AI Agent通过中转API与第三方服务交互时，攻击者可能篡改API响应或工具调用链，从而劫持Agent的行为。例如，攻击者可以注册恶意工具名称与合法工具相似，或利用中转API的信任漏洞注入恶意指令。文章指出，当前AI Agent框架（如AutoGPT、LangChain）对工具调用的校验不足，缺乏对工具来源的完整性验证，导致攻击者能够通过控制中间服务（如API网关、工具市场）来修改Agent的决策逻辑。这种攻击不需要直接入侵Agent服务器，而是利用生态系统的信任关系实现供应链级劫持。作者强调了代理信任边界的重要性，建议对工具调用进行签名验证、请求溯源和异常行为检测。

本论文系统性地研究了DNS响应预处理过程中的逻辑漏洞，提出了一类名为TuDoor的新型攻击。作者通过深入分析DNS RFC标准和多种DNS软件实现，发现了三种此前未知的逻辑漏洞类型，并基于这些漏洞设计了三种攻击方式：DNS缓存投毒、拒绝服务（DoS）和资源消耗攻击。实验表明，攻击者可以在1秒内使用少量精心构造的畸形DNS响应数据包对易受攻击的解析器实施缓存投毒或DoS攻击，或绕过查询限制耗尽解析器资源（如CPU）。研究评估了影响的广泛性，包括24款主流DNS软件（如BIND、PowerDNS、Microsoft DNS）、7款路由器/路由器操作系统、18个公共DNS服务以及约180万开放DNS解析器中的424,652个（23.1%）。按照负责任披露流程，已向所有受影响厂商报告漏洞，其中BIND、Chrome、Cloudflare和Microsoft等18家厂商已确认并讨论缓解措施。此外，已分配33个CVE编号，并提供了在线检测工具作为缓解措施之一。研究强调了标准化DNS响应预处理逻辑的迫切性。

本文提出了一种新型的密码学原语——模糊消息检测（Fuzzy Message Detection, FMD），其核心思想是在远程存储云上实现带有假阳性率的模糊检测，从而保护客户端隐私，不向不可信的云泄露确切的匹配消息。现有的基于公钥的方案需要多个公钥生成单个标记密文，导致公钥证书管理成本过高。为此，论文提出了一种基于身份的高效在线/离线加密方案：所有重计算操作在离线阶段完成（无需知道每条消息的身份），在线阶段只需轻量计算即可快速生成单个标记密文。该方案应用于基于区块链的模糊消息检测系统，并设计了一种新的历史索引方案（基于Dodis的可验证随机函数和Schnorr签名），用于索引交易历史以及访问存储云（存储和检测消息）的顺序，并由每个客户端签名。论文对所提出的在线/离线ID-FMD方案进行了隐私保证和差分隐私需求分析，并在Fibos平台和华为弹性云上实现了系统。主要贡献在于：1）提出了身份基模糊消息检测方法，消除了公钥证书管理开销；2）设计了在线/离线加密框架，将大量计算移至离线；3）结合区块链提供不可篡改的历史索引；4）给出了形式化的隐私分析。适合密码学、隐私保护、分布式系统领域的研究者和工程师阅读。

随机信标（Random Beacon）是一种持续提供公开随机性的服务，广泛应用于公共彩票、零知识证明等密码学协议。现有随机信标协议在安全性、通信复杂度或可重配置性方面存在妥协：有的牺牲容错性，有的通信开销过高，有的难以动态调整参与节点集合。本文提出RandPiper协议，通过创新性地结合状态机复制（State Machine Replication, SMR）与可公开验证秘密共享（Publicly Verifiable Secret Sharing, PVSS/VSS），实现了在二次通信复杂度（quadratic communication）下的高效随机信标。具体地，RandPiper利用SMR维护一个共享的全局状态，并通过PVSS/VSS在节点间分发随机性秘密，使得协议能够容忍拜占庭故障，同时支持参与节点的动态加入与退出（即重配置）。与现有工作相比，RandPiper在保持相同容错能力的同时，将通信复杂度从三次或更高降至二次，显著降低了网络开销。实验表明，该协议在节点规模增长时仍能保持可扩展性，适用于需要持续、可靠随机性的分布式系统。该论文适合对分布式系统、密码学协议及区块链底层设施感兴趣的研究者与工程师阅读。

Citrix NetScaler 内存泄漏(CVE-2025-5777)

### Description Bugsink’s issue list supports bulk actions such as resolving or muting selected issues. In affected versions, the issue list view authorizes access through the project in the URL, but applies the requested bulk action to the submitted issue IDs without also requiring those issues to belong to that project. This is a project-boundary authorization issue: a logged-in user with acces

### Description Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requiring it to belong to the issue in the URL. This is a project-boundary authorization issue: a logged-in user with access to one project can view another project’s event data through an issue they are allowed to access. However, the issue is mitiga

## Impact The admin tables for `PaymentMethods`, `Currencies` and `Carriers` exposed inline toggles and per-record actions (enable, disable, edit, delete) that were rendered for any authenticated panel user without checking the corresponding per-action permission. A low-privilege user could: - Disable every payment method on the store, blocking checkout. - Disable or alter the default currency,

### Impact TinyMCE 6.8.x contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer. A crafted payload using nested elements can bypass attribute sanitization and execute arbitrary JavaScript. ### Patches This issue affects TinyMCE 6.8.x-7.0.x. The vulnerability is fixed in TinyMCE 7.1.0 and later. ### Workarounds No official workaround available. ### Acknow

PLANET VDR-300NU ADSL Router - 未授权修改DNS

Acknowledgements

定向灰盒模糊测试（DGF）旨在通过预定义目标位置强化对易受攻击代码区域的测试。现有DGF技术主要基于启发式算法优化适应度指标，但这些方法依赖历史执行信息，对尚未执行的路径缺乏预见性，导致难以处理具有复杂约束的路径，从而降低DGF效率。本文提出DeepGo，一种预测性定向灰盒模糊测试器，通过结合历史与预测信息，引导DGF沿最优路径到达目标位置。首先，DeepGo引入路径转换模型，将DGF建模为通过特定路径转换序列到达目标的过程；变异生成的新种子会引发路径转换，高奖励路径转换序列对应的路径更有可能到达目标。其次，为预测未执行的路径转换及其奖励，DeepGo使用深度神经网络构建虚拟集成环境（VEE），该环境逐步模仿路径转换模型并预测路径转换的奖励。然后，开发了模糊测试强化学习（RLF）模型，生成具有最高序列奖励的转换序列，RLF结合历史与预测路径转换生成最优序列，并指导变异策略。最后，为执行高奖励路径转换序列，提出动作组概念，综合优化模糊测试关键步骤，高效实现最优路径。实验在包含25个程序、100个目标位置的基准测试集上进行，结果表明DeepGo在到达目标位置的速度上比AFLGo、BEACON、WindRanger和ParmeSan分别快3.23倍、1.72倍、1.81倍和4.83倍，在暴露已知漏洞方面分别快2.61倍、3.32倍、2.43倍和2.53倍。

本文提出了一种名为符号解释器分析（SIA）的新方法，用于解决动态Web应用程序在符号执行中面临的多语言挑战。传统的符号执行工具由于对动态语言（如PHP）的语法支持有限且工程成本高，难以有效分析现代Web应用。SIA的核心思想是：由于Web应用逻辑由解释器（如PHP解释器）执行，因此可以利用现成的符号执行引擎分析解释器的二进制代码，从而间接理解Web应用的行为。这种方法继承了解释器对完整语法的支持，并复用了现有符号执行引擎的成熟工程实现。然而，SIA需要解决若干技术挑战，包括Web应用的探索（如处理超链接、表单等）、数据库交互的符号化建模等。作者基于SIA实现了SymPHP，一个针对PHP应用的混合执行（concolic execution）引擎。实验表明，SymPHP在多种PHP应用上实现了高代码覆盖率，并成功识别了数据集中77.23%的已知漏洞，显著优于此前的方法。此外，基于SymPHP构建的混合模糊测试框架进一步提升了模糊测试效率，并发现了10个新漏洞。该工作适合安全研究人员、Web应用安全工程师以及符号执行领域的开发者阅读，为动态语言Web应用的自动化漏洞发现提供了新的思路。

A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the function set_macfilter of the file /sbin/jdcweb_rpc. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respon

A security flaw has been discovered in iAI Lab PDF AI App 4.21.0 on Android. Impacted is the function getExternalCacheDir of the component chatpdf.pro. Performing a manipulation of the argument _display_name results in path traversal. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure b

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass, Password Recovery Exploitation, Brute Force. This issue affects MyRezzta: from s2.03.01 before v2.05.01.

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure. This issue affects OctoCloud: from s1.09.02 before v1.11.01.

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based SQL Injection via 'compact_album_order_by' Shortcode Parameter in all versions up to, and including, 1.8.41 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contr

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 12.4.16. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access and above, to invoke privileged state-changing Squirrly cloud API operations, such a

The Click to Chat – WA Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [chat] shortcode 'num' parameter in all versions up to, and including, 4.38. This is due to insufficient escaping when embedding user-supplied shortcode attribute values inside JavaScript string literals that are then placed in HTML event-handler attributes. The CCW_Shortcode::shortcode() functi

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass. This issue affects OctoCloud: from s1.09.03 before v1.11.01.

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access and above, to create

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Insecure Direct Object Reference / Authorization Bypass leading to Arbitrary Attachment Deletion in versions up to, and including, 1.8.11.1 via the profile avatar update flow. This is due to the save_avatar() function in Charitable_Profile_Form calling wp_delete_attach

A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path parameter that bypasses validation, allowing arbitrary files (including entire directories returned as archives) to be read from the server filesystem. Because the readable files include service configuration and cred

MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage download handlers where the local destination path is constructed by concatenating the configured download directory with a filename taken directly from remote cloud API metadata without basename normalization or path validation. An attacker who controls a filename returned by a remote cloud storage AP

### Description `SandboxNodeVisitor` enforces `SecurityPolicy::checkMethodAllowed()` for implicit `__toString()` calls by wrapping selected AST nodes in `CheckToStringNode`. The set of wrapped nodes is incomplete, and several Twig language constructs still trigger PHP string coercion on a `Stringable` operand without first consulting the policy. A sandboxed template author can therefore invoke `_

### Description `Twig\Profiler\Dumper\HtmlDumper` writes `Profile::getTemplate()` and `Profile::getName()` straight into its HTML output without escaping: ```php protected function formatTemplate(Profile $profile, $prefix): string { return \sprintf('%s└ %s', $prefix, self::$colors['template'], $profile->getTemplate()); } ``` The template name comes from the loader (the array key for `ArrayL

A path traversal vulnerability exists in the Altium Enterprise Server Collaboration Service due to improper handling of user-supplied filenames in the MCAD and Simulation file download flows. A regular authenticated user can submit a collaboration message containing a crafted filename, which is later used to construct the download path on the server without validation, allowing arbitrary files to

A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in the Vault service. Because the key is identical across all installations, an unauthenticated network attacker who can reach the server can forge valid download signatures and retrieve files from the Vault storage area without any authentication, session, or credentials. A separate path traversal vuln

Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise Server allow an unauthenticated network attacker to write arbitrary files to any writable location on the server filesystem and to read package archive files from the server. No authentication, session, or credentials are required. Because content-controlled files can be written to web-accessible

The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 5.38. This is due to a capability check in the save_ajax() function of the licensing module, combined with unrestricted file extraction in sync_cloud_protection(). This makes it possible for authe

A path traversal vulnerability exists in the Altium Enterprise Server Vault Service UploadController due to improper validation of a user-controlled path component in image upload requests. An authenticated user can supply a crafted absolute path so that the configured storage root is discarded, allowing arbitrary files to be written to any location on the server filesystem writable by the service

## Impact Two distinct authorization defects in the team settings allowed any authenticated panel user to take over the RBAC system: - `Settings/Team/Index` had no `mount()` authorization. Any authenticated user could load the page and use its public actions to create new roles and delete other users, including administrators. - `Settings/Team/RolePermission` gated its write actions on the read-

## Impact Three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS: - **IDOR via unlocked properties.** Several Livewire components in the admin panel exposed Eloquent model identifiers as public properties without the `#[Locked]` attribute. An authenticated user could rewrite the wire payload from the browser to target any record id, b

Firefox browsers

Sign in to Cloud

Sign Up for Free Cloud Tier

iOS 26.4.2 and iPadOS 26.4.2

iOS 18.7.8 and iPadOS 18.7.8

iOS 18.7.7 and iPadOS 18.7.7

iOS 26.4 and iPadOS 26.4

Background Security Improvements for iOS, iPadOS, and macOS

iOS 16.7.15 and iPadOS 16.7.15

iOS 15.8.7 and iPadOS 15.8.7

iOS 26.3 and iPadOS 26.3

iOS 18.7.5 and iPadOS 18.7.5

iOS 26.2 and iPadOS 26.2

iOS 18.7.3 and iPadOS 18.7.3

Compressor 4.11.1

iOS 18.7.2 and iPadOS 18.7.2

iOS 26.1 and iPadOS 26.1

iOS 26.0.1 and iPadOS 26.0.1

iOS 18.7.1 and iPadOS 18.7.1

iOS 26 and iPadOS 26

iOS 18.7 and iPadOS 18.7

Android Code Search

Android Devices

Secure an Android device

Android 16 QPR2

Mobile network security

iOS 26.5 and iPadOS 26.5

iOS 18.7.9 and iPadOS 18.7.9

iOS 16.7.16 and iPadOS 16.7.16

iOS 15.8.8 and iPadOS 15.8.8

MFSA 2026-49Security Vulnerabilities fixed in Firefox for iOS 151.0

MFSA 2026-52Security Vulnerabilities fixed in Firefox for iOS 151.1

MFSA 2026-53Security Vulnerabilities fixed in Firefox for iOS 151.2

The ChromeOS Beta channel is being updated to OS version 16667.35.0 (Browser version 149.0.7827.88) for most ChromeOS devices.If you find new issues, please let us know one of the following ways:File a bugVisit our ChromeOS communitiesGeneral: Chromebook Help CommunityBeta Specific: ChromeOS Beta Help CommunityReport an issue or send feedback on ChromeInterested in switching channels? Find out how

Akamai 发布了名为 'Firewall for AI' 的新产品，旨在保护 AI 应用和数据免受各类网络威胁。该产品结合了 Akamai 在边缘计算和网络安全领域的经验，针对利用 AI 模型发起的攻击（如针对大语言模型的提示注入、拒绝服务攻击等）提供专用防护。根据公开信息，该防火墙可能集成流量分析、异常检测和实时阻断能力，以防御针对 AI 基础设施的 DDoS 攻击和恶意 botnet 活动。目前产品文档未披露具体技术实现细节，但表明该解决方案将专注于确保 AI 工作负载的可用性与完整性。

该论文研究自主LLM代理在持有真实凭证且无人参与时，如何响应服务器发出的带内拒绝信号（Recuse Signal）。当前访问控制只有两种模式：允许代理（凭有效凭证进入）或硬拒绝（与其他客户端无异）。论文提出第三种模式：一种轻量级、公开的带内信号，服务器通过现有协议通道（如SSH横幅、PostgreSQL NOTICE）发出，要求连接的自动化代理自愿退出。这类似于robots.txt但用于实时访问，是一种协作治理控制，而非安全边界。作者定义了该信号作为开放小标准，实现了两个低开销适配器（SSH横幅/PAM钩子和PostgreSQL有线协议代理），并在生产主机上部署。通过控制实验，使用OpenAI GPT-4o、GPT-4o-mini和Claude Code作为代理，执行良性运维任务。结果表明，信号存在时100%的代理退出，无信号时100%完成任务。但有趣的是，该信号表现为协作而非绝对：当明确操作员授权框架时，能力最强的模型继续执行，而其他代理仍遵循主机策略。论文发布了标准、适配器和实验框架以供复现。

## Impact `skillctl` 0.1.0 and 0.1.1 contained four path-safety vulnerabilities that, in combination, allowed an attacker to: 1. **Exfiltrate arbitrary files on the operator's machine** by publishing a malicious skills library containing a symlink inside a skill folder (e.g. `niania → /home/user/.aws/credentials`). The symlink fell through `entry.file_type().is_dir()` in `fs_util::copy_dir_all`,

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

Security & Identity

SAP on Google Cloud

Inside Google Cloud

Google Cloud Next & Events

Google Cloud Consulting

Transform with Google Cloud

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Google Threat Intelligence Group • 16-minute read

Google Cloud Products

Cloud & Application Security

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

Next-Gen Identity Security

CrowdStrike FalconID Brings Phishing-Resistant MFA to Falcon Next-Gen Identity Security

CrowdStrike Named a Leader in Identity Threat Detection and Response

ISO 42001:2023 and the New Reality of Cloud AI Data RiskJun 04, 2026

A Chinese espionage group tracked as UNC5221 has been accessing Microsoft 365 environments using the Brickstorm backdoor and previously undocumented malware named Plenet and AgentPSD. [...]

本文针对智能家居平台中存在的自动化规则异常和跨平台威胁问题，提出了名为 CP-IoT 的跨平台监控系统。智能家居平台广泛使用，用户通过定义自动化规则实现日常任务，但不同平台上的规则异常（如执行不一致）和跨规则威胁（如多个规则组合导致安全隐患）难以被现有单一平台检测工具覆盖。CP-IoT 的核心创新在于构建一个中心化的动态图模型，用于刻画自动化规则的行为和状态变迁。该系统通过分析两种不同描述粒度的应用页面，提取规则执行逻辑并收集不同平台的用户策略。为了检测同一规则在不同平台上的不一致行为，作者提出了一种基于侧信道流量聚类的自学习事件指纹提取方法，并通过检查规则执行行为与图模型中规格是否一致来实现异常检测。对于跨规则威胁，系统将每种威胁类型形式化为符号表示，并在图上应用搜索算法来发现潜在危险组合。实验在四个主流智能家居平台上进行，结果表明 CP-IoT 能够高准确率地检测异常，并有效发现多种类型的跨规则威胁。该研究为跨平台智能家居安全监控提供了新思路，适合智能家居安全研究人员、平台开发者及安全运维人员阅读。

该论文提出了一种名为K-LEAK的框架，旨在自动化生成Linux内核中基于内存错误的信息泄露利用。研究背景是：内核信息泄露的严重性不容低估，现有利用技术虽多，但缺乏对基于内存错误的信息泄露利用搜索空间的系统推理，导致大量内存错误未被有效利用。论文首先对内存错误进行了理论建模，揭示了实际搜索空间巨大且涉及多步骤，几乎任何内存错误都可能被利用来泄露信息。为弥合理论与实践之间的差距，K-LEAK将信息泄露利用生成视为数据流搜索问题。通过建模内存错误引入的意外数据流以及现有内存错误如何创建新的内存错误，K-LEAK能够以多步骤方式系统地搜索信息泄露的数据流路径。作者基于该框架实现了原型，并使用来自syzbot和CVE的内存错误进行了评估。评估结果表明，K-LEAK能够有效生成使用多种多步骤策略的多样化信息泄露利用。该工作贡献在于：1) 对内核内存错误利用空间的理论建模；2) 提出系统化的自动化利用生成方法；3) 实验证明其有效性和多样性。适合安全研究人员、内核开发者以及蓝队防御者阅读，以深入理解内核信息泄露利用的自动化生成机制。

本研究针对大型媒体平台（如YouTube）上日益猖獗的评论诈骗（comment scams）进行了首次系统性、大规模的分析。攻击者通过脚本控制的账户自动发布或回复评论，以免费奖品和投资机会为诱饵，诱使用户联系他们，最终窃取用户的金融资产。研究团队设计并实现了一套基础设施，在6个月内从20个不同的YouTube频道收集了880万条评论。他们基于文本、图形和时间特征开发了过滤器，识别出来自10,000个独立账户的206,000条诈骗评论。通过分析诈骗活动、评论动态以及攻击者使用的规避技术，研究人员揭示了诈骗团伙的运作模式。此外，经伦理审查委员会批准，研究者与50名诈骗者进行了互动，深入了解其社会工程策略和支付偏好。利用公共区块链上的交易记录，他们对诈骗者窃取的金融资产进行了定量分析，发现仅参与互动研究的诈骗者就已窃取了价值数百万美元的资金。研究表明，现有的诈骗检测机制不足以遏制此类滥用行为，亟需更好的评论审核工具以及限制攻击者在大型平台上获取数万个账户的改进措施。本论文适合安全分析师、平台防御工程师及社交媒体安全研究者阅读。

本文研究了ORAM（遗忘随机存储器）的批量加载问题，即如何高效地将大量数据快速构建成ORAM结构。ORAM是一种重要的密码学原语，用于保护数据访问模式不被泄露。近年来，随着ORAM协议的理论改进以及基于硬件的可信执行环境（TEE）的引入，ORAM在实际安全系统中开始被采用。然而，现有ORAM协议的批量加载过程效率低下，理论复杂度高达O(N log^3 N)，严重制约了其在安全云系统中的应用场景，如数据恢复、布局转换和查询处理。为此，本文提出了BULKOR协议，该协议基于当前最先进的Path ORAM协议进行了扩展。BULKOR支持在不信任服务器上部署TEE，并满足双重遗忘要求，以缓解现代TEE中的侧信道问题。BULKOR将批量加载的理论复杂度从O(N log^3 N)降低到O(N log^2 N)，并在实际性能上取得了显著提升。实验表明，在多种设置下（包括硬盘和内存中实现ORAM），BULKOR相比基线设计Oblix和ZeroTrace分别实现了8.7倍至54.6倍和5.8倍至533.1倍的性能提升，且不牺牲安全性。本文的主要贡献包括：提出了一种适用于TEE的批量加载ORAM协议，优化了理论复杂度，并通过大量实验验证了实际性能优势。适合对ORAM、TEE安全以及云存储安全感兴趣的研究人员阅读。

本文提出了一种基于类型系统的方法来推导程序暴露的抽象“怪异机器”（weird machines）。背景是：广泛使用的关键软件系统中存在潜伏漏洞，攻击者可触发并级联这些漏洞，使程序行为异常，形成可被利用的编程模型。作者创新性地设计了一种信息流类型系统，通过追踪信息流类型来检测漏洞，并抽象漏洞间的控制流以捕获怪异机器。形式化证明表明，推导出的怪异机器能够覆盖程序可能表现出的所有怪异运行时行为。进一步，攻击模式往往简单且重复，因此可以将抽象机器建模为漏洞类型的正则表达式，这种表示与平台无关，可作为攻击的统一描述语言。最后，基于正则表达式的语言包含性等决策比针对具体程序或其他形式语言的决策高效得多。本文主要贡献在于：提供了一种自动化推导程序内部攻击能力（即怪异机器）的框架，并给出了平台无关的攻击描述方法。适合安全研究人员、编译器开发者及系统安全工程师阅读。

该论文对IETF RFC 8555标准化的ACME证书颁发与管理协议进行了深入的符号化安全分析。ACME协议是Web公钥基础设施（PKI）的核心组成部分，被Let's Encrypt等证书颁发机构用于颁发超过10亿张证书，目前绝大多数HTTPS连接都依赖通过ACME颁发的证书。然而，尽管ACME至关重要，其安全性此前并未像TLS 1.3或OAuth等其他协议标准那样得到深入分析。以往的形式化分析仅考虑了早期草案版本的加密核心，忽略了许多安全关键的低级细节，这些细节在长达100页的RFC中占据重要地位，例如递归数据结构、带有异步子协议的长时间运行会话、以及针对多域名证书的颁发。本研究通过建立全面的符号模型，涵盖了ACME协议的所有主要功能和安全目标，包括客户端与服务器之间的交互、域名验证、证书请求与颁发、以及撤销等流程。分析发现了一些先前未知的安全缺陷，例如在某些配置下，攻击者可能通过操纵域名验证过程或利用状态混淆来获得未经授权的证书。该研究还提出了协议改进建议，并验证了修复措施的有效性。这项工作对于理解ACME协议的实际安全性、指导部署配置以及未来协议演进具有重要意义。适合协议设计者、安全研究员以及PKI实施者阅读。

现有网络交换机普遍采用先进先出（FIFO）或差额轮询（DRR）等调度策略，以提供良好的利用率和公平性，但这些策略会通过时序侧信道泄露客户端流量的多种信息，威胁用户隐私。为解决这一隐私泄露问题，本文提出了一种名为“无差异优先调度”（Indifferent-First Scheduling, IFS）的新型交换机调度机制。IFS的核心特点是：允许客户端选择加入以获取隐私保护（即强隔离性），而对满足于现有调度性能的客户端，则继续保持FIFO或轮询调度带来的高效率和低延迟。这种混合调度机制克服了先前方案（如时分多址TDMA）的主要缺陷——TDMA虽提供强隔离，但会降低所有客户端的利用率和增加延迟。论文分析发现，现代可编程交换机的硬件限制阻碍了IFS在不牺牲隐私保证前提下的实现。然而，作者证明，在最近提出的推入优先输出（PIFO）队列架构中，可以实现具有完全安全性的IFS版本，且能达到线速处理。该研究为网络隐私保护与性能权衡提供了新的设计思路，适合网络研究人员、安全工程师及交换机设计者阅读。

该论文关注深度神经网络（DNN）应用中图像数据的隐私保护问题。现有技术如差分隐私虽能提供强隐私保证，但无法有效保护图像的可视化特征。为此，作者提出一种新型隐私保护框架 VisualMixer，通过像素混洗（pixel shuffling）来保护视觉 DNN 任务的训练数据，且不引入任何噪声。框架引入了一种新的隐私度量指标——视觉特征熵（Visual Feature Entropy, VFE），该指标从生物视觉和机器视觉两个角度量化图像的可视化特征。VisualMixer 采用任务无关的图像混淆方法，根据期望的 VFE 值确定图像中需要像素混洗的区域及其大小，并在空间域和色度通道空间内进行像素混洗，从而在不注入噪声的情况下防止视觉特征被识别。实验表明，该方法在真实数据集上能够有效保护视觉隐私，平均仅导致 2.35 个百分点的模型精度损失，且几乎不降低训练性能。该方法适用于自动驾驶、医学图像分析等隐私敏感场景。

本文研究了基于查询的数据匿名化系统中存在的侧信道攻击问题。数据匿名化是计算机隐私领域的一个长期挑战，一种常见的实践方法是向分析人员提供查询接口，并在每次查询时动态进行匿名化处理。这种方法通常依赖标准数据库后端，并直接向分析人员暴露数据库的查询语义。作者发现，这种设计虽然旨在通过查询级别的匿名化保护隐私，但实际上可能引入侧信道漏洞：攻击者可以通过观察查询结果、响应时间、错误消息等外部信息，推断出数据库中敏感的统计信息或个体记录。论文系统地分析了多种可能的侧信道攻击向量，包括基于结果集大小、基于响应时间差异、基于错误提示等，并形式化地定义了攻击模型。通过实验，作者证明了在流行的匿名化查询系统（如 DataSifter、Diffix 等）中存在可被利用的侧信道，能够以高置信度推断出原始数据的分布、异常值甚至具体记录的存在。此外，论文讨论了现有防御机制的不足，并提出了一些初步的缓解策略，如引入查询结果噪声、统一响应时间、消除错误信息等。该研究揭示了基于查询的匿名化方案在安全性上的薄弱环节，为隐私保护系统设计者提供了重要的警示和改进方向。适合关注数据隐私、侧信道分析、数据库安全的研究人员和安全从业者阅读。

无人机开源飞控 PX4-Autopilot堆栈溢出漏洞 CVE-2025-15150

MongoDB内存泄漏 CVE-2025-14847(MongoBleed)

1Panel 代理证书验证绕过导致任意命令执行漏洞(CVE-2025-54424)

ModelContext Inspector 未授权访问漏洞(CVE-2025-49596)

llamaindex SQL 注入漏洞(CVE-2025-1750)

Screen 本地权限提升漏洞(CVE-2025-23395)

Zabbix认证后SQL注入漏洞(CVE-2024-42327)

ProjectSend认证绕过漏洞(CVE-2024-11680)

PyTorch库RPC框架反序列化RCE漏洞(CVE-2024-48063)

Grafana认证后DuckDB-SQL注入漏洞(CVE-2024-9264)

SPIP BigUp Unauthenticated RCE(CVE-2024-8517)

Rejetto HFS 远程命令执行漏洞(CVE-2024-39943)

Apache HugeGraph-Server Command Execution In Gremlin（CVE-2024-27348）

Zabbix 后台延时注入(CVE-2024-22120)

CrushFTP 认证绕过漏洞（CVE-2024-4040）

Alert for CVE-2026-21992

Alert for CVE-2025-61884

Alert for CVE-2025-61882

Alert for CVE-2024-21287

Alert for CVE-2022-21500

Alert for CVE-2021-44228

Linux 内核提权 CVE-2026-31431(copy-fail)

【安全通告】Linux Kernel "CIFSwitch" 本地权限提升漏洞风险通告（CVE-2026-46243）

论文《RedEdit: Agentic Red-Teaming of Image Safety Classifiers via MCTS-Guided Photo-Editing》研究了图像安全分类器在面对用户级恶意图片编辑时的鲁棒性。当前互联网内容审核系统广泛依赖图像安全分类器，但其对用户日常可能进行的图片编辑操作（如裁剪、滤镜、叠加文字等）的抵抗能力未被充分探索。作者提出了一种名为RedEdit的新型黑盒红队测试代理，将图片编辑逃逸问题形式化为编辑工具序列上的组合搜索问题。RedEdit采用基于视觉语言模型（VLM）的提议器生成语义上有针对性的候选编辑，并利用蒙特卡洛树搜索（MCTS）规划器优先探索有希望的编辑路径，同时从无效路径回溯。提议器和规划器分别模拟了人类攻击者的领域知识和迭代回溯能力，以复现这一实际威胁。在UnsafeBench基准上的大量实验揭示了深层的系统脆弱性：平均只需不到两次编辑，就能使76.2%的不安全图像逃逸检测器，同时保留93.0%的恶意语义，意味着这些被篡改的内容对人类仍具有感知上的恶意，却轻易绕过了自动化审核。论文呼吁社区更多关注这一被忽视的实际威胁。

作弊行为严重威胁多人在线游戏（MOG）行业，降低玩家满意度并破坏竞技公平性。尽管已有多种缓解技术，作弊检测与预防仍面临实际困难，尤其是基于网络流干扰（network flow disruption）的一类作弊目前尚无解决方案。为了开发针对此类攻击的检测方法，需要带有标注的代表性数据集，但此前并不存在。本文利用一个实验框架，该框架结合了一款多人在线游戏与一个插件，既能复现作弊攻击，又能收集网络层和应用层的日志。论文发布了一个数据集，收录了由真实玩家和自动化游戏客户端进行的多局游戏会话记录，并明确标注了作弊行为。据作者所知，这是首个提供网络流干扰作弊日志的数据集，同时还包括了常见的瞄准辅助（aimbot）和透视（wallhack）等作弊记录。该数据集可供学术界和工业界的研究人员用于开发在线游戏作弊检测机制，并且具有可扩展性，其他人可利用该框架创建自己的数据轨迹。

该论文提出了 AttackPathGNN，一种用于 Solidity 智能合约漏洞检测的图神经网络方法。现有基于学习的检测器通常局限于单函数内的语法模式匹配，忽略了跨函数调用关系和条件组合导致的漏洞（如 The DAO、Cream Finance 等著名安全事件）。AttackPathGNN 将漏洞检测重新定义为对显式攻击路径的推理。其核心创新包括：（1）状态干扰图（State Interference Graph），通过带类型和权重的边连接所有共享可变存储的函数对，并通过显式五条件谓词定义有向重入路径边；（2）合取池化（conjunction pooling），一种可微的 AND 聚合器，对八个已命名的利用前提条件进行聚合，其 log-sigmoid 形式使得当任何单一缓解措施（如重入保护、访问控制修饰符或 SafeMath）存在时，每函数的利用得分会骤降。在五个独立训练运行中，AttackPathGNN 在 SmartBugs Wild 测试集上达到了 92.3±0.2% 的 F1 分数（假阴性率 4.3±0.3%），在独立人工标注的 SmartBugs Curated 基准上检测率为 90.8±2.5%，在 6/10 的 DASP10 类别上达到 100% 召回率，对重入漏洞的检测准确率为 98.7±1.8%。每个预测还附带结构化的修复报告，将检测结果转化为可操作的函数级审计发现。该研究适用于智能合约安全审计人员和漏洞检测研究者。

该论文针对专有RAG（检索增强生成）数据库面临的未授权分发问题，提出了名为SentinelRAG的水印框架。现有水印方法要么在真实实体间注入虚构关系，从而污染知识库并引入错误信息，要么嵌入脆弱的词汇模式，容易被对抗性改写移除。SentinelRAG的核心思想是将风格一致但虚构的知识条目（例如描述不存在实体的内容）注入RAG数据库中。关键洞察是，这类合成知识不太可能被合法查询检索到，但可以通过数据所有者已知的定向探针可靠触发。实验在四个规模从2.9k到8.8M文档的数据集上进行，结果显示在仅0.1%的注入率下，所有测试配置均实现了统计显著性检测（p < 10^{-5}）。与现有最优方法相比，该方法显著降低了误检率，同时保持对合法用户查询的干扰可忽略不计。该研究适用于关注RAG系统数据安全、版权保护和防泄漏的安全从业者。

该论文提出了一个形式化框架，用于分析去中心化金融（DeFi）组合的经济安全。DeFi服务通常由多个智能合约组合而成，这种可组合性是DeFi成功的关键驱动力，但也带来了安全风险：攻击者可以利用新部署的合约与已有合约之间的交互来造成经济损失。论文引入了“MEV非干扰”这一形式化安全概念，要求一组新部署的合约的最大可提取价值（MEV）不会因与现有区块链状态的交互而增加。为了支持这一概念，作者定义了“局部MEV”，这是一种新型的经济攻击度量标准，专注于给定受害者合约集的损失。论文研究了两种对手模型（有界财富和无界财富），并建立了充分条件和局部性原则，从而实现对安全组合性的模块化推理。作者将该框架应用于代表性的DeFi组合，包括交易所、自动做市商（AMM）、期权、借贷池、路由器和套利合约，展示了它如何区分安全组合与脆弱组合。该工作为推理DeFi组合的经济安全性提供了形式化基础，适合对DeFi安全、形式化方法和MEV研究感兴趣的读者。

本文针对基于可信执行环境（TEE）的联邦学习聚合协议中的安全漏洞进行了研究。作者首先分析了现有协议，发现服务器端攻击者可以利用TEE的局限性，即状态回滚和I/O操纵，通过操纵客户端选择和重放聚合来破坏系统的鲁棒性和隐私性。为了解决这些问题，本文提出了DIST-FL，一种由多个TEE保护的分布式服务器系统，这些TEE形成一个仅追加账本，用于实现隐私保护和鲁棒的联邦学习聚合。具体而言，DIST-FL通过确保操作线性化来防止状态回滚攻击，并通过纳入来自可靠服务器的输入来缓解I/O操纵威胁。作者在广域网（WAN）环境中实现了DIST-FL并进行了评估。实验结果表明，DIST-FL能够有效抵御所提出的攻击，并且在利用TEE计算优势的同时，其性能与单TEE方案相当，但吞吐量比同类方案提升了6倍。该研究为联邦学习安全聚合提供了新的思路，适合联邦学习、系统安全、隐私保护领域的研究人员和工程师阅读。

该论文是一篇关于后量子密码学（PQC）在软件系统中实现的系统化知识（SoK）研究。随着量子计算威胁的临近，将现有密码学算法迁移至抗量子算法已成为保护软件系统的关键任务。尽管标准化算法（如CRYSTALS-Kyber、Dilithium等）已发布，但开发者和组织在将其集成到实际软件系统中仍面临重大挑战。现有研究多聚焦于密码学性能和算法安全性，缺乏对影响PQC成功实现的更广泛社会-技术因素的理解。本文从人（Human）、组织（Organisation）、技术（Technology）三个维度系统梳理了PQC实现的方法与挑战。通过综合现有文献，研究发现当前知识体系存在显著不平衡：技术解决方案占据主导地位，而人力和组织层面的考虑（如开发者培训、组织流程调整、成本效益分析等）被严重忽视。进一步分析表明，这些挑战并非孤立存在于单一维度，而是跨HOT维度的相互关联的社会-技术约束，共同影响实现效果。为此，作者提出了PQC-HOT模型，这是一个概念框架，用于解释HOT维度之间的交互如何共同影响PQC实现。该模型将SoK中识别的实现干预措施和挑战整合为一个结构化的框架，支持系统化的决策、规划和组织转型策略。基于这些洞察，论文还指出了未来研究方向，包括如何设计可扩展、可持续的PQC实现方案。本文适合安全架构师、开发团队、风险管理者和政策制定者阅读，帮助他们从全局视角理解PQC迁移的复杂性。

本文针对分布式基础设施系统（包括云计算、物联网和边缘架构）面临的日益扩大的攻击面与复杂威胁，提出了一种认知威胁情报与可解释联邦安全分析框架。传统集中式入侵检测方法在可扩展性、数据隐私、通信开销以及AI决策透明性方面存在局限。该框架融合联邦学习（FL）、可解释人工智能（XAI）和认知安全分析，实现跨分布式网络的协作式隐私保护威胁检测。其核心是：各分布式节点本地独立训练安全模型，仅通过联邦聚合机制共享加密的模型参数与更新，而非原始网络流量数据，从而提升隐私保护、降低通信依赖与集中风险。在智能威胁分析方面，框架集成了Random Forest、XGBoost、Autoencoder等机器学习和深度学习算法，并通过XAI提供可解释的检测结果，增强安全分析师对AI决策的信任。实验设计与性能评估部分在摘要中未详述，但作者声称该框架在隐私保护、检测准确率和解释性方面优于传统方法。本文适合联邦安全、可解释AI及分布式系统安全领域的研究者与从业者阅读。

自主航天器由于计算资源和能量受限，需要轻量级、低延迟且可靠的机载网络与射频（RF）威胁检测能力。本研究基于SPARTA攻击模型，针对上行链路干扰、Fake-NR欺骗、载荷操纵、地面段妥协和未授权命令注入等典型攻击，系统分析了四种TinyML兼容的经典机器学习模型——随机森林（RF）、逻辑回归（LR）、支持向量机（SVM）和多层感知机（MLP）——在检测精度与推理延迟之间的权衡。作者首先从理论上推导了各模型的计算复杂度、VC维、Lipschitz连续性等物理可解释指标，建立了延迟缩放模型；随后通过BandErasure、FakeNR和NoiseBurst三种对抗性RF频谱图生成模式，在真实数据集上进行了实验评估。结果表明，逻辑回归模型的推理时间达到微秒级，准确率仅比随机森林低约1%，成为在极端资源约束下进行机载自主威胁检测的高效基线方案。此外，论文指出通过引入更丰富的特征编码器（如卷积特征）和多时间尺度学习架构，可以进一步提升检测性能，为未来利用边缘智能和可信AI推动航天器网络安全提供了方向。该研究适合空间系统安全工程师、TinyML开发者及嵌入式AI研究人员阅读。

本文研究差分隐私（DP）约束下的多目标子模最大化（MOSM）问题，旨在从敏感数据集中选择一个最多包含 k 个元素的子集，以最大化 d 个单调子模函数的最小值，同时满足 ε-差分隐私。虽然差分隐私单目标子模最大化和非隐私的多目标子模最大化已有大量研究，但据作者所知，本文是首个将差分隐私与多目标子模最大化相结合的工作。作者提出了两种新算法：第一种扩展了经典贪心算法，第二种采用截断技术，两者均集成了差分隐私机制以实现隐私保护，并给出了针对 MOSM 的近似保证。最后，作者在多目标设置下，针对最大覆盖和设施选址两个子模最大化应用进行了数值实验，验证了所提算法的有效性和效率。该工作主要面向对差分隐私、子模优化理论感兴趣的算法研究人员。

A vulnerability was determined in GL.iNet MT3000 up to 4.4.5. This vulnerability affects unknown code of the file ovpnclient.sh of the component OpenVPN Client Import Workflow. This manipulation causes command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 4.9.0_beta3-1012-0513-1778656146 is able to resolv

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, which lets them take complete control of a WordPress website. [...]

Cisco has warned that a high-severity security flaw impacting Catalyst SD-WAN Manager has come under active exploitation. The vulnerability, tracked as CVE-2026-20245, carries a CVSS score of 7.8 out of a maximum of 10.0. It affects the following deployment types - On-Prem Deployment Cisco SD-WAN Cloud-Pro Cisco SD-WAN Cloud (Cisco Managed) Cisco SD-WAN for Government (FedRAMP) "A

Android 兼容性测试套件 (CTS) 是 Android 平台官方提供的工具集，用于验证设备是否符合 Android 兼容性定义文档 (CDD) 的要求。CTS 通过执行一系列自动化测试，确保不同厂商的 Android 设备在应用兼容性、系统行为、API 实现等方面保持一致。该公告于 2026 年 6 月 7 日由 Android 安全公告发布，主要涉及 CTS 的版本更新或说明，未提及任何具体的安全漏洞。其内容可能包括测试用例的调整、新版本 Android 的适配或测试流程的改进。由于无 CVE 和严重性评级，本次公告不涉及紧急安全修复，但仍提醒开发者和设备制造商关注 CTS 更新，以维持应用的跨设备兼容性。

Android兼容性定义文档（CDD）是Android生态系统中的关键文档，它规定了设备必须满足的硬件和软件要求，以确保能够运行Android应用并保持一致性。CDD覆盖了从传感器、屏幕、内存到安全模块等多个方面的详尽规定。本次更新可能涉及新的安全要求或功能兼容性调整，但输入中未提供具体变更内容。CDD本身并非安全漏洞公告，而是开发者与设备制造商的兼容性规范文档。

该页面是 Android 安全公告中的“工具、构建及相关参考”部分，主要提供 Android 构建系统、开发工具、API 参考等开发文档的链接。页面内容并非安全漏洞公告，不包含任何漏洞描述、修复补丁或安全建议。因此，该文档对防守方无直接安全影响，仅作为开发参考资源。

Android 安全公告发布了最新版本的兼容性定义文档（CDD），该文档定义了设备制造商在构建兼容 Android 设备时必须满足的硬件和软件要求。本次更新可能涉及新的功能、API 变更、安全要求或对其他标准的引用。虽然不直接修复特定安全漏洞，但遵循 CDD 有助于确保设备安全性和生态一致性。公告日期为 2026-06-07。

Android安全公告发布最新一期（2026年6月），涵盖多个安全补丁。由于公告正文未提供具体漏洞细节，本次更新可能修复了系统组件、内核或框架中的安全缺陷。建议用户及时关注官方更新日志，并应用最新安全补丁。

Apple 发布了安全更新公告，标题为“update the software on your Mac”，来源于 Apple Security Releases（https://support.apple.com/en-us/108382），发布于 2026-06-07。该公告未提供具体的漏洞描述、CVE 编号或严重性评级。通常，Apple 的安全更新会修复影响 macOS 系统的安全漏洞，可能涵盖内核、系统组件或预装软件中的缺陷。攻击者可能利用这些漏洞提升权限、执行任意代码或绕过安全机制。由于缺乏细节，无法确定漏洞的具体成因和利用方式，但建议用户尽快更新软件以降低风险。

苹果公司于2026年6月7日发布安全公告，建议用户更新iPhone或iPad上的软件。公告未提供具体的漏洞细节或CVE编号，但强调更新修复了潜在的安全问题。由于缺乏技术细节，无法确认受影响的具体组件或攻击向量。建议用户遵循官方指引，及时将设备更新至最新版本的iOS或iPadOS，以确保获得最新的安全补丁。

该页面是苹果公司（Apple）的官方安全研究提交入口（https://support.apple.com/en-us/102549），标题为“submit your research”。该页面并非具体的漏洞公告或安全更新通知，而是面向安全研究人员提供的漏洞提交渠道，用于向苹果产品安全团队报告潜在安全问题。页面中未提供任何具体的CVE、受影响产品、漏洞描述或严重性评级。因此，该页面本身不包含可操作的防御性信息，但对于希望合法提交安全发现的研究人员具有参考价值。

这是一个 Apple 官方安全支持页面，供用户报告安全问题或获取相关帮助。页面由 Apple Security Releases 维护，属于通用安全公告渠道，但当前未包含具体的漏洞描述、CVE 编号或受影响产品信息。

苹果发布了名为“Background Security Improvements”的安全公告，该公告涉及系统底层基础安全增强，但未披露具体漏洞细节或CVE编号。此类改进通常旨在提升操作系统防御纵深，修复潜在的安全隐患，但具体影响范围和技术细节因信息不足无法确定。建议用户保持设备系统版本为最新，以受益于这些安全改进。

该输入内容并非有效的安全公告。标题为公安备案信息，来源链接为公安备案系统，与阿里云安全公告不符。未提供漏洞描述、CVE编号、受影响产品或严重性等关键信息，因此无法生成有效摘要。

Pocsuite 是由知道创宇（Knownsec）安全研究团队开发和维护的一款开源远程漏洞测试框架，它是知道创宇安全研究团队发展的基石，长期被用于 Web 安全研究、漏洞验证和渗透测试场景。该框架支持多种协议（如 HTTP、HTTPS、TCP、UDP）和灵活的插件机制，允许安全研究人员快速编写和共享漏洞检测脚本。Pocsuite 在设计上强调模块化与可扩展性，其核心功能包括目标批量扫描、自定义 Payload 注入、结果输出等，广泛应用于企业内部安全审计、红蓝对抗演练以及安全研究社区。作为知道创宇安全能力的重要支撑，Pocsuite 不仅提升了漏洞发现效率，也促进了安全社区的技术交流。本次公告来自知道创宇官方渠道，介绍了 Pocsuite 的基本定位与能力，未提及特定漏洞、CVE 或严重性评级。该工具本身是一把双刃剑，在防守方手中可用于主动检测资产漏洞，但在攻击者手中也可能被用于恶意攻击。因此，建议安全团队将其纳入自身安全测试工具链，并关注其后续版本更新。

Seebug 是由知道创宇运营的国内权威漏洞参考、分享与学习的安全漏洞社区平台。截至2026年6月，已收录52206个漏洞和44236个PoC，为安全研究和防御者提供丰富的漏洞情报。该平台涵盖各类软件、硬件和云服务的漏洞信息，但本次公告未披露具体漏洞细节或CVE编号。目前严重性未知，无相关资产列表。用户可访问Seebug官网查询最新漏洞动态。

该内容为知道创宇的广告宣传，介绍其网站安全防护服务，包括多层安全防护体系、云端大数据和安全CDN加速，可防御DDoS、DNS、CC等攻击。但未提供任何具体漏洞信息、技术细节或安全公告。

360CERT 发布的公告内容为网站备案信息（京公网安备 11000002002063 号），并非安全漏洞或威胁公告。该备案信息仅用于标识网站运营主体合规性，不涉及任何已知漏洞或安全风险。因此，没有需要防御方关注的技术细节。

本公告为360CERT发布的资质证明信息，标题为“（总）网出证（京）字第281号”，内容涉及360公司取得的网络出版服务许可证。该公告并非安全漏洞或威胁情报，不涉及任何技术细节、CVE编号或安全风险。

输入内容并非有效的安全厂商公告。标题“京网文〔2020〕6051-1195号”是版权或许可证号码，来源链接为360CERT的页面，但内容为空，无漏洞描述、CVE、受影响产品等安全相关信息，无法进行技术摘要。

该输入并非安全公告，无法生成相关摘要。

A security vulnerability has been detected in GL.iNet GL-MT3000 4.4.5. The impacted element is the function rpc_sys of the file /cgi-bin/luci/rpc of the component LuCI JSON-RPC Interface. Such manipulation leads to command injection. The attack may be performed from remote. Upgrading to version 4.8.1 is sufficient to resolve this issue. Upgrading the affected component is advised. The vendor confi

A security flaw has been discovered in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function iwinfo_backend of the file iwinfo.so of the component MTK Backend. The manipulation of the argument device results in command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 4.7 is recommended to address this is

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the file /rpc of the component Minidlna Service. This manipulation of the argument kube. set causes command injection. The attack is possible to be carried out remotely. Upgrading to version 4.7 is sufficient to fix this issue. It is recommended to upgrade the affected component. The v

A vulnerability was detected in GL.iNet GL-MT3000 4.4.5. This affects the function dlopen in the library /usr/lib/oui-httpd/rpc/ of the component Path Normalization Handler. Performing a manipulation of the argument dev_name results in command injection. It is possible to initiate the attack remotely. Upgrading to version 4.7 mitigates this issue. It is advisable to upgrade the affected component.

clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation.

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan.aspx. Such manipulation of the argument httpOID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability has been found in theonedev onedev up to 15.0.5. Affected by this vulnerability is an unknown functionality of the file /projects. The manipulation of the argument project.forkedFromId leads to improper authorization. The attack is possible to be carried out remotely. Upgrading to version 15.0.6 addresses this issue. Upgrading the affected component is recommended.

A vulnerability was identified in theonedev onedev up to 15.0.5. This vulnerability affects the function canAccessIssue of the file /issues/ of the component Pull Request Handler. Such manipulation of the argument issue leads to improper authorization. It is possible to launch the attack remotely. Upgrading to version 15.0.6 is able to resolve this issue. It is advisable to upgrade the affected co

A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Project Handler. The manipulation of the argument project.parentId results in improper authorization. The attack may be performed from remote. Upgrading to version 15.0.6 can resolve this issue. It is recommended to upgrade the affected com

A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in an

A vulnerability was determined in theonedev onedev up to 15.0.5. This affects an unknown part of the file /repositories/{projectId}/default-branch of the component REST API. This manipulation of the argument project.defaultBranch causes improper authorization. It is possible to initiate the attack remotely. Upgrading to version 15.0.6 is able to mitigate this issue. Upgrading the affected componen

A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mage_ai/frontend/components/Sessions/SignForm/index.tsx of the component Sign-in Flow. Performing a manipulation of the argument query.redirect_url results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted

A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of the file /admin/blocks of the component Blocks Plugin. This manipulation causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any w

Protocol::HTTP2 versions through 1.12 for Perl is vulnerable to a HTTP/2 Bomb. Protocol::HTTP2's inbound HPACK path has no header-list size limit, so a small HTTP/2 request can expand into large server memory (the "HTTP/2 bomb"). The headers_decode method materialises a full key+value copy per indexed reference with no running size check, and the stream_header_block_add method appends (since ver

A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some unknown processing of the file app/model/LogMod.js of the component Log Viewer Endpoint. Such manipulation of the argument req.query leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. The name of the patch is 805d82e7100d49b79b3beb1b942

A weakness has been identified in Jinher OA C6. The affected element is an unknown function of the file /C6/JHSoft.Web.ModuleCount/GetFormSn.aspx. Executing a manipulation of the argument queryID can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure bu

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft QR Menu allows Authentication Bypass. This issue affects QR Menu: from s1.05.07 before v1.05.12.

Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request Forgery. This issue affects QR Menü: from s1.05.06 before v1.05.12.

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n_drop_browse_text' Settings in all versions up to, and including, 1.3.9.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arb

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 via the ajax_load_more function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that th

The Klamra Paycal for Aspaclaria plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.4 via the 'invoice_id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to download arbitrary customer invoices by enumerating sequential post IDs, e

The OptinCraft – Drag & Drop Optins & Popup Builder for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level ac

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Neutralization for Logs in all versions up to, and including, 2.5.0. This is due to the `log_js_errors()` AJAX handler being registered for unauthenticated users via `wp_ajax_nopriv_log_js_errors` and gated only by a nonce that is publicly disclosed in every front-end page's HTML t

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Parameters in iframe Mode in all versions up to, and including, 2.8.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.6 via the 'return_type' parameter. This makes it possible for unauthenticated attackers to extract sensitive data including the plaintext post_password of password-protected courses and the full post_content, post_au

The Smart Slider 3 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.5.1.36 via the replaceHTMLImage function. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

The MDJM Event Management plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7.8.3 via the mdjm_send_comm_email function. This is due to no file type, extension, or MIME type validation being performed on uploaded files. This makes it possible for authenticated attackers, with administrator-level access and above, to upload files that may be executa

The Booking Package plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in versions up to, and including, 1.7.16. This is due to a missing capability check on the 'updateUser' branch of the package_app_action AJAX endpoint, where the handler only validates a nonce and the dispatcher invokes Schedule::updateUser() with the $administrator argument hard-coded to 1, bypassi

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'location_messages' parameter in all versions up to, and including, 4.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to injec

The EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the block 'url' attribute in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject

The Quick Playground plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.4. This is due to the `qckply_data()` function passing the user-supplied `filename` POST parameter directly to `file_get_contents()` without any validation, sanitization, or path restriction. This makes it possible for authenticated attackers, with Administrator-level access and abov

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including, 2.96.6. This is due to missing ownership verification in the REST API routes registered via `Mappress_Api::rest_api_init()`, where the GET `/wp-json/mapp/v1/maps/{mapid}` endpoint uses `'permission_callback' => '__return_true'` and the write e

The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.1.4 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no

The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in versions up to and including 1.10.0.1. This is due to the PayPal Commerce webhook endpoint processing unauthenticated JSON webhook payloads without verifying that the request originated from PayPal using the required H

The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to Arbitrary File Read via Directory Traversal in all versions up to, and including, 4.1.4 via the 'import-user-file' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive informa

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass. This issue affects MyRezzta: from s2.03.01 before v2.05.01.

The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Submission Data in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute

The Page-list plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.2. This is due to the pagelist_unqprfx_ext_shortcode() function (the [pagelist_ext] / [pagelistext] shortcode) accepting attacker-controlled post_status, post_type, and show_meta_key attributes and passing them directly into get_pages() and get_post_meta() with no capability check veri

The Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'jtlma_custom_js' Page Setting (Custom JS Extension) in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level acc

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order' parameter in all versions up to, and including, 11.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with admin-level access

The Simple SEO Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an

The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1. This is due to missing or incorrect nonce validation on the funp_ajax_modify_notes function. This makes it possible for unauthenticated attackers to trick a logged-in user into visiting a malicious page, causing unauthorized overwriting of that victim's own note con

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.6.0. This is due to missing or incorrect nonce validation on the change_status function. This makes it possible for unauthenticated attackers to change the status of arbitrary invoices — including marking unpaid invoices as pai