When NGINX Plus or NGINX Open Source is configured as the data plane for NGINX Gateway Fabric, an...
CVE-2026-50107
When NGINX Plus or NGINX Open Source is configured as the data plane for NGINX Gateway Fabric, an injection vulnerabilit
2026-06-18 归档
今日共收录 819 条安全情报，包含 0 个 CVE，417 篇安全通告，以及 115 篇研究论文。
← 返回归档列表When NGINX Gateway Fabric is configured using GRPCRoutes, an authenticated, remote attacker with...
CVE-2026-32682
When NGINX Gateway Fabric is configured using GRPCRoutes, an authenticated, remote attacker with permission to create or
Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak
CVE-2026-55450
### Summary Unauthenticated users can upload any amount of data to the server without any limitations. No need for any p
When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection...
CVE-2026-11311
When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX
Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join
CVE-2026-54324
### Summary A cross-tenant authorization flaw in Daytona's notification WebSocket gateway allowed any authenticated user
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation
CVE-2026-55518
## Summary A critical missing authorization flaw exists in Avo's association attach workflow. The UI and `GET /resource
AI Agent 的信任边界：从中转 API 到 Agent Tool Call 的供应链劫持
本文探讨了AI Agent（人工智能代理）在调用外部工具（Tool Call）时存在的供应链劫持风险，重点关注信任边界问题。攻击者可利用中转API或Agent自身的工具调用机制，通过劫持工具调用链（例如篡改第三方API响应、注入恶意工具或替
FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices.
近日，安全研究人员发现一起名为“FortiBleed”的数据泄露事件，涉及约73,932个Fortinet和FortiGate VPN设备的登录凭证。这些凭证以文本形式被公开，可能包括IP地址、用户名和密码，影响全球各类组织。泄露的数据看起
Token Time Bomb: Evaluating JWT Implementations for Vulnerability Discovery.
本文提出了一种名为JWTeemo的自动化测试方法论，用于系统性地发现JSON Web Token (JWT) 实现中的安全漏洞。JWT作为分布式Web应用中广泛使用的认证和授权标准，其实现常存在签名验证绕过、令牌伪造、拒绝服务等漏洞。此前的
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike 与 Zscaler 宣布合作，将持续身份安全能力集成到零信任访问架构中。该合作结合 CrowdStrike Falcon 平台的端点检测与响应（EDR）能力与 Zscaler Zero Trust Exchange
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike Announces Continuous Identity for AI Agents
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Stable Channel Update for Desktop
CVE-2026-12449 · CVE-2026-12457 · CVE-2026-12456 · CVE-2026-12454 · CVE-2026-12440 · CVE-2026-12448 · CVE-2026-12444 · CVE-2026-12452 · CVE-2026-12467 · CVE-2026-12451 · CVE-2026-12464 · CVE-2026-12461 · CVE-2026-12459 · CVE-2026-12453 · CVE-2026-12455 · CVE-2026-12460 · CVE-2026-12463 · CVE-2026-12465 · CVE-2026-12437 · CVE-2026-12446 · CVE-2026-12445 · CVE-2026-12439 · CVE-2026-12462 · CVE-2026-12443 · CVE-2026-12447 · CVE-2026-12438 · CVE-2026-12442 · CVE-2026-12458 · CVE-2026-12450 · CVE-2026-12466 · CVE-2026-12441
The Stable channel has been updated to 149.0.7827.155/.156 for Windows and Mac and 149.0.7827.155 for Linux, which will
Defects-in-Depth: Analyzing the Integration of Effective Defenses against One-Day Exploits in Android Kernels.
该论文聚焦于Android内核面对一日漏洞（one-day exploits）时，现有纵深防御机制的有效集成问题。研究背景是：Android系统依赖内核安全机制（如访问控制、控制流完整性、地址空间布局随机化等）来抵御已知漏洞的利用；然而，这
libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service...
CVE-2026-55199
libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service vulnerability in the SS
Gitea: Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes
CVE-2026-24791
## Summary Many authenticated self routes under `/api/v1/user/...` do not enforce the `public-only` token restriction.
Open WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameter
CVE-2026-54021
## Summary Several direct, index-addressed Ollama proxy routes accept a caller-supplied `url_idx` path parameter and us