The silent Just-In-Time (JIT) provisioning feature in federated authentication implementations...
CVE-2024-1248
The silent Just-In-Time (JIT) provisioning feature in federated authentication implementations fails to properly segrega
2026-07-05 归档
今日共收录 754 条安全情报，包含 65 个 CVE，375 篇安全通告，以及 61 篇研究论文。
← 返回归档列表Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state...
CVE-2026-12740
Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter. RequestTokenV2 bu
Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0...
CVE-2026-12746
Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter. The
A security vulnerability has been detected in NousResearch hermes-agent up to 0.15.2. This...
CVE-2026-14627
A security vulnerability has been detected in NousResearch hermes-agent up to 0.15.2. This affects the function DiscordA
A vulnerability was detected in NousResearch hermes-agent up to 2026.5.16. This impacts the...
CVE-2026-14628
A vulnerability was detected in NousResearch hermes-agent up to 2026.5.16. This impacts the function extract_media of th
A security flaw has been discovered in NousResearch hermes-agent up to 0.15.2. The affected...
CVE-2026-14625
A security flaw has been discovered in NousResearch hermes-agent up to 0.15.2. The affected element is the function shel
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected...
CVE-2026-14617
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is the function Gatewa
Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a...
CVE-2026-58523
Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over
Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose...
CVE-2026-58522
Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose...
CVE-2026-58300
Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an...
CVE-2026-58299
Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execu
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)...
CVE-2026-58289
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Troubleshooting an Intrusion Detection Dataset: the CICIDS2017 Case Study.
本论文回顾了广泛使用的网络入侵检测基准数据集CICIDS2017，对其数据收集流水线进行了深入分析，评估了数据集在流量生成、流构建、特征提取和标注方面的正确性、有效性和整体可用性。研究发现该数据集存在一系列严重问题：流量生成不符合实际网络环
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike与Zscaler宣布合作，将持续身份安全集成到零信任访问框架中。该合作旨在结合CrowdStrike Falcon平台的端点检测与响应（EDR）能力以及Zscaler的零信任网络访问（ZTNA）方案，实现基于用户身份、
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike 宣布推出面向 AI 代理的持续身份验证解决方案，旨在增强 AI 工作负载的安全性。该方案将身份安全与端点检测和响应（EDR）能力相结合，为 AI 代理提供实时身份验证和访问控制，防止未经授权的访问和恶意利用。公告未提
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft...
CVE-2026-58298
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)