CapSpeaker: Injecting Voices to Microphones via Capacitors.
本文研究了一种名为CapSpeaker的新型攻击方法，能够在没有扬声器的情况下，通过电子设备内部的电容器向麦克风注入恶意语音命令。核心原理是利用电容器的逆压电效应：当施加交变电压时，电容器会因压电材料变形而产生机械振动，从而发出声音。然而，
2026-06-20 归档
今日共收录 996 条安全情报，包含 203 个 CVE，413 篇安全通告，以及 100 篇研究论文。
← 返回归档列表ElectionGuard: a Cryptographic Toolkit to Enable Verifiable Elections.
ElectionGuard是一个由微软研究院开发的密码学工具包，旨在为选举系统提供端到端的可验证性。该工具包基于同态加密和零知识证明等密码学技术，允许选民验证自己的选票是否被正确记录，同时保护选票的机密性。论文详细描述了ElectionGu
Revisiting Hybrid Private Information Retrieval.
本文重新审视了混合私有信息检索（Hybrid PIR）协议。私有信息检索允许客户端从多个服务器持有的公共数据库中检索条目，同时不向服务器泄露任何关于所请求数据的信息。传统上，PIR分为两类：多服务器PIR（客户端将查询分割到k≥2个非合谋服
SurrealDB: SSRF via JWKS URL — Redirect Following in JWT Key Fetch
SurrealDB fetches the JWKS document for a JWT or record access method using a bare `reqwest` client that follows HTTP re
pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size
### Summary `NestedSecretsSettingsSource` reads secret values from files in a configured `secrets_dir`. When `secrets_n
Zeep: Server-Side Request Forgery (SSRF)
## Summary When parsing a WSDL or XSD document, python-zeep follows transitive references — xsd:import, xsd:include, ws
OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete)
### Summary OpenRemote Manager is vulnerable to a cross-tenant Insecure Direct Object Reference (IDOR) in the bulk alarm
Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests
## Impact Uni-CLI versions before 0.225.2 exposed the legacy JSON-RPC-over-HTTP MCP transport on loopback without valid
stigmem-node: decay sweep expires and counts facts across all tenants (cross-tenant BOLA)
### Summary On a multi-tenant stigmem node, a caller holding a `write` credential for **one** tenant can run a decay swe
stistigmem-node: quarantine review surface exposes and mutates other tenants' quarantined facts (cross-tenant BOLA)
### Summary On a multi-tenant stigmem node, a tenant administrator could list, read, and **admit or reject** quarantined
stigmem-node: RTBF tombstones are mis-attributed and suppress reads tenant-blind (cross-tenant BOLA)
### Summary On a multi-tenant stigmem node, RTBF (right-to-be-forgotten) tombstones were mis-scoped two ways. (1) `issue
Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory
### Summary `AgentRuntime` promises scoped file access under a configured sandbox `basePath`, but its path containment c
Sveltia CMS: Stored XSS in Markdown/RichText preview via unsandboxed same-origin iframe
### Impact A stored cross-site scripting (XSS) vulnerability affected the Markdown/RichText field preview renderer in S
VCR.py: Arbitrary code execution via unsafe YAML deserialization of cassette files
### Summary vcrpy deserializes YAML cassette files with PyYAML's object-constructing loader (`yaml.CLoader` / `yaml.Loa
Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag
## Summary Crossplane allows package signature verification to be configured via the `ImageConfig` mechanism. When enab
Blocky DNSSEC validation bypass and validation-cache scope pollution
## Summary Blocky accepts and caches forged DNS answers while `dnssec.validate: true` is enabled. The issue has two rel
无人机开源飞控 PX4-Autopilot堆栈溢出漏洞 CVE-2025-15150
CVE-2025-15150
无人机开源飞控 PX4-Autopilot堆栈溢出漏洞 CVE-2025-15150
MongoDB内存泄漏 CVE-2025-14847(MongoBleed)
CVE-2025-14847
MongoDB内存泄漏 CVE-2025-14847(MongoBleed)
1Panel 代理证书验证绕过导致任意命令执行漏洞(CVE-2025-54424)
CVE-2025-54424
1Panel 代理证书验证绕过导致任意命令执行漏洞(CVE-2025-54424)
ModelContext Inspector 未授权访问漏洞(CVE-2025-49596)
CVE-2025-49596
ModelContext Inspector 未授权访问漏洞(CVE-2025-49596)