Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
2026-06-23 归档
今日共收录 1003 条安全情报，包含 243 个 CVE，376 篇安全通告，以及 99 篇研究论文。
← 返回归档列表Hard-label Black-box Universal Adversarial Patch Attack.
该论文提出了一种硬标签黑盒通用对抗补丁攻击方法。在现实世界的黑盒场景中，攻击者无法获取模型参数、梯度或置信度分数，只能获得最终的硬标签（如分类结果）。现有的对抗补丁攻击通常需要白盒或灰盒访问，或针对特定实例生成。本文首次研究了在硬标签黑盒设
@actual-app/sync-server's missing authorization on GET /secret/:name allows non-admin OpenID users to enumerate admin-configured bank-sync secrets
CVE-2026-46700
## Summary In `@actual-app/sync-server`, the `GET /secret/:name` endpoint (`app-secrets.js:53`) checks only that the ca
WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows...
CVE-2026-53779
WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers t
A command injection vulnerability has been identified in the DHCP option processing logic in...
CVE-2026-11834
A command injection vulnerability has been identified in the DHCP option processing logic in multiple TP-Link router mod
motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint
CVE-2026-31978
### Summary motionEye v0.43.1 (latest stable) is vulnerable to path traversal in the picture and movie API endpoints, l
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
Welcome to Jurassic Park: A Comprehensive Study of Security Risks in Deno and its Ecosystem.
本文对新兴JavaScript运行时Deno及其生态系统deno.land的安全性进行了全面研究。Deno由Rust编写，号称比Node.js更安全，具有严格权限系统（静态/运行时权限检查）和基于URL的透明依赖管理。作者首先对比Deno与
Privacy-Preserving Data Deduplication for Enhancing Federated Learning of Language Models.
本文针对联邦学习场景中数据去重面临的隐私和可扩展性挑战，提出了一种高效隐私保护的多方去重协议 EP-MPD。在联邦学习中，不同客户端的数据可能存在重复样本，去除这些重复能提升模型性能并节省训练时间与能耗。然而，传统去重需要聚合各方数据，会泄
HyperFuzzer: An Efficient Hybrid Fuzzer for Virtual CPUs.
该论文提出 HyperFuzzer，一种针对虚拟机监控器（hypervisor）中CPU虚拟化实现的高效混合模糊测试工具。在云计算时代，hypervisor 的安全性至关重要，尤其是 CPU 虚拟化模块，它运行在最高特权级，漏洞可能导致整个
A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (F...
CVE-2026-55653
CVE-2026-55653 是 OpenSSH 中的一个 double free 漏洞，位于 Diffie-Hellman Group Exchange (DH-GEX) 客户端路径中。当客户端在 FIPS 模式下处理攻击者控制的 DH-
Gogs Missing Authorization in Attachment Download
CVE-2026-52799
## Summary In Gogs 0.14.1, `GET /attachments/:uuid` returns the raw attachment file **without verifying whether the req
@budibase/backend-core has potential SSRF DNS rebinding bypass in outbound fetch validation
CVE-2026-54353
Summary Authenticated users with automation permissions can bypass Budibase's SSRF blacklist through DNS rebinding. Th
Budibase: Unauthenticated S3 signed upload URL generation allows arbitrary writes with stored datasource credentials
CVE-2026-50136
The application server exposes an unauthenticated endpoint that generates S3 `PutObject` presigned URLs using credential
scimPatch vulnerable to prototype pollution via unfiltered keys in patch
CVE-2026-48170
## Summary `scim-patch` performs prototype pollution when applying a SCIM PATCH operation whose `value` object contains
Budibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadata
CVE-2026-48153
## Summary `fetchToken` in the OAuth2 SDK makes a POST to a builder-supplied URL with plain node-fetch, skipping the `b
Gogs has SSRF in webhook deliveries
CVE-2026-47267
### Summary The fix for CVE-2022-1285 prevents adding webooks or running webhooks with URLs with a hostname that resolv
Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack
CVE-2026-46611
### Summary The Glances XML-RPC server (`glances -s`, implemented in `glances/server.py`) does not validate the HTTP `H
Glances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution
CVE-2026-46607
### Summary `glances/outdated.py` uses `pickle.load()` to read a version-check cache file stored at a predictable, worl