nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation
CVE-2026-47724
The `/api/v1/*` route surface trusts the bearer token alone for authorisation on most endpoints. The codebase itself adm
2026-06-10 归档
今日共收录 1730 条安全情报，包含 831 个 CVE，478 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Chromium: CVE-2026-11291 Policy bypass in Android Autofill
CVE-2026-11291
CVE-2026-11291 是 Chromium 中的一个策略绕过漏洞，影响 Android Autofill 功能。该漏洞允许攻击者绕过 Android 系统的自动填充策略，可能导致用户在自动填充表单时敏感信息被泄露或意外提交。Micr
Threat IntelligenceExploitation of KnowledgeDeliver via ViewState Deserialization VulnerabilityBy Mandiant • 7-minute read
Mandiant 发布威胁情报报告，详细分析了针对 KnowledgeDeliver 平台的 ViewState 反序列化漏洞利用活动。ViewState 是 ASP.NET Web Forms 用于保持页面状态的一种机制，其序列化数据若未
Schneider Electric EcoStruxure Panel Server
CVE-2026-6866
2026年6月9日，美国网络安全与基础设施安全局（CISA）发布了施耐德电气（Schneider Electric）EcoStruxure Panel Server系列产品中存在的一个高危漏洞公告（ICSA-26-160-03）。该漏洞编号
Schneider Electric Modicon Network Managed Switches
CVE-2024-3596
2026年6月9日，CISA发布了一份关于施耐德电气Modicon系列网络管理型交换机中RADIUS协议漏洞的安全公告。该漏洞编号为CVE-2024-3596，属于通信通道消息完整性执行不当（CWE-924）。当交换机的RADIUS服务器消
PhoenixStorybook has cross-session PubSub topic injection via URL parameter
CVE-2026-47068
### Summary The storybook iframe LiveView accepts a PubSub topic from the URL query string and broadcasts its own pid on
Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion
CVE-2026-47736
### Impact [PROXY protocol support for Puma](https://github.com/puma/puma/issues/2651) was added in version 5.5.0. Whe
Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks
CVE-2026-47735
### Summary Arc's user-SQL validator (`internal/api/query.go:ValidateSQLRequest`) blocked only `read_parquet(` and `arc
nebula-mesh: Web UI and API responses lack security headers (CSP, X-Frame-Options, HSTS, etc.)
CVE-2026-47723
None of the response paths in `internal/web/` or `internal/api/` set the standard browser-security headers. `grep` for `
Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS Chrome Plugin
CVE-2026-47252
# AppleScript/JXA Code Injection via Unescaped URL in macOS Chrome Plugin | Field | Value | | --------------
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
AI Agent 的信任边界：从中转 API 到 Agent Tool Call 的供应链劫持
AI Agent 的信任边界：从中转 API 到 Agent Tool Call 的供应链劫持
CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day
CISA has ordered U.S. government agencies to secure their Check Point Remote Access VPN and Mobile Access deployments ag
Check Point VPN Zero-Day Exploited in Qilin Ransomware Attacks
The authentication bypass vulnerability allows attackers to establish VPN connections without a valid password. The post
Inference Attacks Against Graph Neural Networks.
该论文首次系统性地分析了图神经网络（GNN）在节点级成员推断攻击下的隐私风险。GNN广泛应用于社交网络、蛋白质结构等图数据，但先前对隐私攻击的研究主要集中在欧几里得数据（如图像和文本）上，GNN的隐私漏洞尚未被充分探索。作者定义了三种威胁模
Batching, Aggregation, and Zero-Knowledge Proofs in Bilinear Accumulators.
该论文研究了双线性累加器（bilinear accumulator）中的批处理证明、聚合证明与零知识证明。累加器是一种密码学原语，允许证明者简洁地提交一个集合，并能提供元素属于或不属于该集合的证明。批处理证明是指同时证明多个元素的成员资格或
Bullshark: DAG BFT Protocols Made Practical.
本文提出 Bullshark，一种基于有向无环图（DAG）的异步拜占庭原子广播协议，专门针对常见的同步场景进行了优化。与以往的 DAG 拜占庭容错（BFT）协议类似，Bullshark 在构建 DAG 之上无需额外通信即可达成共识：参与者仅
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Chromium: CVE-2026-10934 Use after free in Autofill
CVE-2026-10934
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P