nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation
CVE-2026-47724
The `/api/v1/*` route surface trusts the bearer token alone for authorisation on most endpoints. The codebase itself adm
2026-06-09 归档
今日共收录 1126 条安全情报，包含 321 个 CVE，413 篇安全通告，以及 105 篇研究论文。
← 返回归档列表CISA Adds Two Known Exploited Vulnerabilities to Catalog
CVE-2026-42271 · CVE-2026-50751
CISA于2026年6月8日更新了已知被利用漏洞（KEV）目录，新增两个被积极利用的漏洞：CVE-2026-42271（BerriAI LiteLLM命令注入漏洞）和CVE-2026-50751（Check Point安全网关认证不当漏洞）
Threat IntelligenceExploitation of KnowledgeDeliver via ViewState Deserialization VulnerabilityBy Mandiant • 7-minute read
Mandiant于2026年6月9日发布报告，披露了一起利用KnowledgeDeliver产品中ViewState反序列化漏洞的攻击活动。该漏洞存在于KnowledgeDeliver的ASP.NET Web应用程序中，攻击者通过构造恶意的
Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion
CVE-2026-47736
### Impact [PROXY protocol support for Puma](https://github.com/puma/puma/issues/2651) was added in version 5.5.0. Whe
Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks
CVE-2026-47735
### Summary Arc's user-SQL validator (`internal/api/query.go:ValidateSQLRequest`) blocked only `read_parquet(` and `arc
nebula-mesh: Web UI and API responses lack security headers (CSP, X-Frame-Options, HSTS, etc.)
CVE-2026-47723
None of the response paths in `internal/web/` or `internal/api/` set the standard browser-security headers. `grep` for `
Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS Chrome Plugin
CVE-2026-47252
# AppleScript/JXA Code Injection via Unescaped URL in macOS Chrome Plugin | Field | Value | | --------------
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with...
CVE-2026-44748
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtai
AI Agent 的信任边界：从中转 API 到 Agent Tool Call 的供应链劫持
AI Agent 的信任边界：从中转 API 到 Agent Tool Call 的供应链劫持
Check Point links VPN zero-day attacks to Qilin ransomware gang
Israeli cybersecurity company Check Point has released security updates to patch a critical flaw affecting Remote Access
Breaking the Specification: PDF Certification.
该论文是首个针对PDF认证签名（Certification Signatures）的全面安全评估。认证签名是PDF规范中定义的两种数字签名之一（另一种为审批签名），用于保证文档的真实性和完整性，并支持复杂的工作流，例如多方签署合同。认证签名
ReScan: A Middleware Framework for Realistic and Robust Black-box Web Application Scanning.
本文提出 ReScan，一个与扫描器无关的中间件框架，旨在透明地增强黑盒 Web 漏洞扫描器的能力。现有扫描器在处理现代 Web 应用时存在导航和交互困难，导致代码覆盖率低。ReScan 通过协调一个全功能的现代浏览器来中介扫描器与 Web
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups
CVE-2026-50751
Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authent...
CVE-2026-50751
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows
SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service...
CVE-2026-24315
SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain,
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS