多款Huawei路由器信息泄露漏洞
多款Huawei路由器信息泄露漏洞
2026-06-28 归档
今日共收录 725 条安全情报，包含 41 个 CVE，384 篇安全通告，以及 89 篇研究论文。
← 返回归档列表SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark.
本文是一篇系统化知识梳理（SoK）论文，聚焦于针对机器学习模型的数据重建攻击。数据重建攻击旨在通过有限访问权限恢复目标模型的训练数据集，近年来受到广泛关注。然而，该领域缺乏统一的攻击定义和评价指标，阻碍了研究进展。作者针对视觉领域提出了统一
Using LLMs to Identify Personal Data Processing in Source Code.
该研究提出了一种基于大型语言模型（LLM）的方法，用于自动识别源代码中个人数据的处理行为，以辅助隐私影响评估。当前软件产品的隐私合规审查高度依赖人工专家，耗时且易出错，尤其面对大规模、频繁变更的应用时挑战巨大。作者首先构建了一个标注数据集，
BaseBridge: Bridging the Gap Between Over-the-Air and Emulation Testing for Cellular Baseband Firmware.
蜂窝基带固件是现代移动设备的核心安全组件，但对其进行安全测试极具挑战。现有仿真器因无法完整模拟数字信号处理器（DSP）、SIM卡、射频前端等复杂外设，导致测试覆盖度有限，模糊测试（fuzzing）只能发现浅层漏洞。本文提出BaseBridg
Poster: Agentic Shell Honeypot Using Structured Logging.
传统shell蜜罐通过模拟命令行界面记录攻击者行为，但通常依赖静态规则响应，无法反映真实世界多轮对抗的复杂性。近年来，大语言模型（LLM）驱动的蜜罐被提出以增强交互真实感，但现有系统仍面临提示注入、状态不一致以及响应延迟等脆弱性，限制了其实
EchoLLM: LLM-Augmented Acoustic Eavesdropping Attack on Bone Conduction Headphones with mmWave Radar.
本研究提出了一种名为EchoLLM的新型声学窃听攻击方法，利用毫米波雷达结合大语言模型（LLM）从骨传导耳机中恢复语音信号。骨传导耳机通过振动颅骨传输声音，传统窃听手段难以直接捕获。作者通过向骨传导耳机发射毫米波雷达信号，并接收反射信号中的
Exploiting Task-Level Vulnerabilities: An Automatic Jailbreak Attack and Defense Benchmarking for LLMs.
该论文针对大型语言模型（LLM）面临的任务级越狱攻击威胁，提出了一种自动化的基准测试框架。研究首先系统性地定义了任务级漏洞的概念，即攻击者通过构造特定任务输入诱使LLM执行非预期行为。作者设计了一种基于对抗性提示生成的自动化攻击方法，能够在
Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container...
CVE-2026-58053
Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docke
The WP Full Stripe Free plugin for WordPress is vulnerable to Missing Authorization in versions...
CVE-2026-12432
The WP Full Stripe Free plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.
The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing...
CVE-2026-12415
The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on th
Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated...
CVE-2026-28701
Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape
pnpm: `stage download` writes outside its destination directory via manifest name/version traversal
CVE-2026-55700
## Summary The staged-tarball filename traversal reported as GHSA-v23m-ccfg-pq9h / CAND-PNPM-038 is fixed on `main` by
Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS
CVE-2026-53522
## 1. Description The Nezha dashboard exposes two endpoints that create long-lived WebSocket streams to monitored agent
Statamic Vulnerable to Server-Side Request Forgery via Glide (DNS rebinding)
CVE-2026-54242
### Impact The Glide image proxy's URL validation could be bypassed using DNS rebinding. The remote hostname was valida
Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key
CVE-2026-53519
### Summary `fallbackToFrontend` in the dashboard's `NoRoute` handler treats any URL whose **raw string** starts with `/
PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option
CVE-2026-49359
### Summary `pontedilana/php-weasyprint` fetches the content of option values server-side via `file_get_contents()` whe
Hackney has SSRF allowlist bypass in hackney_url:normalize/2 via percent-encoded host
CVE-2026-47076
### Summary `hackney_url:normalize/2` URL-decodes the host component of a parsed URL, but the caller's SSRF allowlist r
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier