An AI Security Agent for University ACMIS: Multi-Vector Threat Detection and Automated Response
该论文针对大学学术管理信息系统（ACMIS）面临的多维安全威胁（包括暴力登录、支付欺诈、权限提升、内部数据窃取和学术诚信违规）提出了一种基于AI的安全代理方案。传统基于规则的系统难以区分恶意行为与正常操作，因此作者设计了一个结合监督式异常检
2026-06-10 归档
今日共收录 1730 条安全情报，包含 831 个 CVE，478 篇安全通告，以及 120 篇研究论文。
← 返回归档列表A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory o...
CVE-2026-26239
CVE-2026-26239 是一个影响 File Station 5 的缓冲区溢出漏洞。File Station 5 是一款文件管理应用，通常运行在 QNAP NAS 设备上。该漏洞允许已获得用户账户的远程攻击者通过向 File Stat
A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unautho...
CVE-2026-26237
QuMagie 是 QNAP 推出的一款 AI 相册管理应用，广泛用于 NAS 设备上智能分类和浏览照片。CVE-2026-26237 是一个缺失授权漏洞，源于程序在处理特定请求时未正确执行权限验证。远程攻击者无需任何身份认证即可利用该漏洞
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploi...
CVE-2026-24720
CVE-2026-24720 影响 QNAP File Station 6（可能为 File Station 版本 6，确切版本范围未明确），是一个资源无限制分配或节流的漏洞。该漏洞允许已获得用户账户的远程攻击者通过恶意消耗系统资源，阻止其
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit ...
CVE-2026-24719
该漏洞为QNAP多个操作系统版本中的命令注入漏洞。攻击者需先获得管理员账户权限，然后利用此漏洞在受影响的设备上执行任意命令。厂商已在以下版本中修复：QTS 5.2.9.3492 build 20260507及之后版本，QuTS hero h
A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator account, they can then exploit the vulnerability to read th...
CVE-2025-62851
该漏洞影响 License Center 组件，属于路径遍历漏洞。攻击者需先获得本地管理员账户权限，然后利用该漏洞读取意料之外的文件或系统数据。此漏洞已在 License Center 版本 1.9.56 及后续版本中修复。目前没有证据表明
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a NULL-pointer dereference exists in the WebSocket subp...
CVE-2026-45541
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secure-service wrappers in esp_secure_services.c and esp_secu...
CVE-2026-45329
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secu
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.7, 5.3.5, 5.4.4, 5.5.4, and 6.0.1, an out-of-bounds read flaw exists in the DHCP server ...
CVE-2026-45160
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.7, 5.3.5, 5.4.4, 5.5.4, and 6.0
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.53.0, an authenticated user could supply specially craf...
CVE-2026-46546
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version
SimpleBLE is a cross-platform library and bindings for Bluetooth Low Energy (BLE). Prior to version 0.14.0, there are multiple stack-based buffer overflow vulnerabilities in Sim...
CVE-2026-44634
SimpleBLE is a cross-platform library and bindings for Bluetooth Low Energy (BLE). Prior to version 0.14.0, there are mu
BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the friends REST API that allows any authenticated attacker to enumerate another user's complete ...
CVE-2026-53675
BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the friends REST API that allows any aut
BuddyPress 14.4.0 contains a regular expression injection vulnerability in the activity mention resolver that, when username compatibility mode is enabled, allows attackers to m...
CVE-2026-53674
BuddyPress 14.4.0 contains a regular expression injection vulnerability in the activity mention resolver that, when user
BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the messages REST API that allows authenticated attackers to access arbitrary private message thr...
CVE-2026-53673
BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the messages REST API that allows authen
SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a careful...
CVE-2026-47838
SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.5.0, a remote, unauthenticated denial-of-servi...
CVE-2026-46545
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.5.0, a remote peer can crash any full node by ...
CVE-2026-46543
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, a denial-of-service vulnerability exists ...
CVE-2026-46542
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, iIn handle_dht_get(), the DhtResults accu...
CVE-2026-46541
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, when LightBlockchain::rebranch() adopts a...
CVE-2026-46540
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to