PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
2026-06-12 归档
今日共收录 1106 条安全情报，包含 305 个 CVE，402 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Acknowledgements
Acknowledgements
Idioms: A Simple and Effective Framework for Turbo-Charging Local Neural Decompilation with Well-Defined Types.
本文提出了一种名为 IDIOMS 的神经反编译框架，旨在解决传统反编译工具因编译信息丢失而无法恢复变量名、类型名等代码可读性特征的问题。现有神经反编译方法在处理真实代码时存在严重局限，例如无法为用户自定义的复合类型提供类型定义。IDIOMS
DriveFuzz: Discovering Autonomous Driving Bugs through Driving Quality-Guided Fuzzing.
该论文提出了一种名为 DriveFuzz 的模糊测试工具，旨在自动发现自动驾驶系统（ADS）中的安全缺陷。自动驾驶系统通常依赖深度神经网络处理传感器数据并做出驾驶决策，但这类系统可能因异常输入（如传感器噪声、不规则路况）而表现出不安全行为。
WarpGuard: Protected-Site Control-Flow Integrity for CUDA SASS Binaries
WarpGuard 是首个针对 CUDA SASS 设备二进制文件在已执行指令层面实现受保护站点控制流完整性（CFI）的系统。现有的 CUDA 漏洞利用表明，GPU 内存错误可能导致设备端控制流被篡改，例如内核消费被破坏的返回地址、函数指针
Idira Privilege Cloud Connector versions prior 1.1.100504 under specific conditions and...
CVE-2026-45170
Idira Privilege Cloud Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS cer
Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote...
CVE-2026-12030
Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had comprom
Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115...
CVE-2026-12032
Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-39494
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins Produc
Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote...
CVE-2026-12028
Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-42647
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beardev JoomSport
Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote...
CVE-2026-12010
Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compro
Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that...
CVE-2026-49973
Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remot
An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base)....
CVE-2026-11774
An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(
CodexBar before 0.33.0 contains a credential forwarding vulnerability that allows network...
CVE-2026-49949
CodexBar before 0.33.0 contains a credential forwarding vulnerability that allows network-adjacent attackers to intercep
An authorization issue was addressed with improved state management. This issue is fixed in iOS...
CVE-2025-46308
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, ma
Filament has inconsistent scope enforcement for its AttachAction and AssociateAction Select fields
CVE-2026-48067
The `recordSelectOptionsQuery()` method may be used to scope the options available in the `Select` field for `AttachActi
The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS...
CVE-2026-9648
The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certi
Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information...
CVE-2026-11839
Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. Rotaban allows
CodeIgniter4 has a validation bypass when uploading file extensions via `ext_in` rule
CVE-2026-48062
### Impact The `ext_in` upload validation rule checked the MIME-derived guessed extension instead of the client-provided