Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate...
CVE-2026-48582
Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
2026-06-21 归档
今日共收录 748 条安全情报，包含 44 个 CVE，388 篇安全通告，以及 64 篇研究论文。
← 返回归档列表Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile 是一款移动设备管理解决方案，用于企业统一管理移动终端。根据知道创宇 / Seebug 的安全公告，该产品存在一个代码注入漏洞（未分配 CVE 编号）。由于缺少详细的技术描述，目前
Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and...
CVE-2026-56081
Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all...
CVE-2026-11551
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and in
AI Agent 的信任边界：从中转 API 到 Agent Tool Call 的供应链劫持
本文探讨了AI Agent（智能代理）在调用外部API和工具时面临的供应链安全风险。核心问题在于：AI Agent通常由第三方服务（如中转API）提供功能扩展，但这些中间层可能被攻击者劫持，从而篡改Agent的工具调用（Tool Call）
What You See is Not What the Network Infers: Detecting Adversarial Examples Based on Semantic Contradiction.
该论文聚焦于深度神经网络（DNN）在安全关键领域（如自动驾驶）中面临的对抗性样本威胁。现有防御方法存在诸多局限：只能防御部分对抗性样本，或导致正常输入的高精度损失，且多数无法抵御自适应攻击（即攻击者了解防御机制后针对性构造的样本）。作者观察
Experimenting with Zero-Knowledge Proofs of Training.
本文提出并研究了零知识训练证明（zkPoT）的概念，旨在解决模型所有者如何在保护训练数据集和最终模型隐私的前提下，向验证者证明其模型是按照正确规范训练的。作者首先形式化了zkPoT的安全定义，包括完备性、可靠性和零知识性等属性，为隐私保护的
SysXCHG: Refining Privilege with Adaptive System Call Filters.
本文提出并实现了 SysXCHG，一种系统调用过滤执行机制，旨在使程序能够按照最小权限原则运行。当前广泛使用的 seccomp-BPF 机制采用层次化设计，即一个进程及其所有子进程必须共享同一组允许的系统调用，这导致权限过度宽松，无法在 e
Stealth Key Exchange and Confined Access to the Record Protocol Data in TLS 1.3.
本论文研究了TLS 1.3协议中的隐秘密钥交换（Stealth Key Exchange）机制，旨在提升密钥交换过程的隐蔽性，防止被中间人探测或干扰。同时，论文探讨了对记录协议数据（Record Protocol Data）的受限访问控制，
Anki's local HTTP server does not sufficiently validate requests
## Summary Anki launches a local HTTP server to serve media files and web pages for parts of its interface. The server
@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing
## Arbitrary Cloudinary API Parameter Signing in @jhb.software/payload-cloudinary-plugin ### Summary `@jhb.software/pa
Anki: User scripts in iframes have access to the internal Anki API
## Summary Anki's webview-based pages communicate with the Rust backend using an internal localhost API. Anki implement
Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions
## Summary `network-ai`'s `ApprovalInbox` (`lib/approval-inbox.ts`) is a shipped, exported, documented feature — *"a we
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike与Zscaler宣布合作，将持续身份安全整合到零信任访问架构中。该合作旨在通过结合CrowdStrike的Falcon平台（端点检测与响应）与Zscaler的Zero Trust Exchange（安全访问服务边缘），
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike 于 2026 年 6 月 21 日发布公告，宣布推出针对 AI 代理的连续身份解决方案（Continuous Identity for AI Agents）。该产品旨在应对 AI 代理（如大型语言模型驱动的自动化工具
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's...
CVE-2026-56345
AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php end
SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected
CVE-2026-55866
### Impact Under concurrency, `CheckPermission` and `CheckBulkPermissions` can return `PERMISSIONSHIP_HAS_PERMISSION` f
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements