ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a...
CVE-2026-60002
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This
2026-07-08 归档
今日共收录 1050 条安全情报，包含 282 个 CVE，378 篇安全通告，以及 103 篇研究论文。
← 返回归档列表ratex-parser has unbounded parser recursion that leads to stack overflow (process abort)
CVE-2026-53531
### Summary RaTeX’s recursive-descent parser recurses one (or more) native stack frame per nesting level at `{`, `\lef
Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality
CVE-2026-34225
### Summary There is a blind server side request forgery in the functionality that allows editing an image via a prompt.
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
Trust Me, I Know This Function: Hijacking LLM Static Analysis using Bias.
该论文探讨了大型语言模型（LLM）在静态分析任务中的安全漏洞，特别是针对函数克隆检测、代码相似性分析等场景。作者提出了一种利用模型偏见（bias）的对抗攻击方法，通过精心构造的输入样本，诱导LLM错误地识别函数行为或归属，从而隐藏恶意代码或
Decompiling the Synergy: An Empirical Study of Human-LLM Teaming in Software Reverse Engineering.
本论文首次系统性地研究了大型语言模型（LLM）在软件逆向工程（SRE）中与人类分析师协作的效果。研究者首先通过一项在线调查收集了153名从业者对当前LLM在SRE中应用现状的看法；随后设计了一项精细的人工实验，邀请48名参与者（24名新手和
Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low...
CVE-2026-56843
Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated custo
An HTML injection vulnerability in the file view endpoint of LiquidFiles v4.2.7 allows...
CVE-2026-36163
An HTML injection vulnerability in the file view endpoint of LiquidFiles v4.2.7 allows authenticated attackers to execut
Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise
CVE-2026-53553
> [ Click here to jump to the Simplified Chinese version (点击跳转到简体中文版本)](#goploy-系统任意文件读取) # Goploy System Arbitrary File
Goploy: Cross-namespace IDOR and RCE via body-supplied row id in project and project_file handlers
CVE-2026-53552
### Summary `Project.AddFile`, `Project.EditFile`, `Project.RemoveFile`, and `Project.Edit` in `cmd/server/api/project/
aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address
CVE-2026-53533
### Summary `aiosmtplib`'s `SMTP.mail()`, `SMTP.rcpt()`, `SMTP.vrfy()` and `SMTP.expn()` send the caller-supplied email
ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)
CVE-2026-53530
### Summary The public parser entrypoint `ratex_parser::parse(&str)` panics on the **9-byte** input `\verbéxé` (i.e. `\
NocoBase through 2.1.20 contains a server-side request forgery vulnerability in the serverRequest...
CVE-2026-58468
NocoBase through 2.1.20 contains a server-side request forgery vulnerability in the serverRequest wrapper that allows au
Better Auth: OAuth refresh-token rotation forks the token family on concurrent redemption
CVE-2026-53517
### Am I affected? Users are affected if all of the following are true: - Their project depends on `@better-auth/oauth
Better Auth has an account takeover issue via OAuth auto-link to unverified pre-registered email
CVE-2026-53516
### Am I affected? Users are affected if all of the following are true: - Their application uses `better-auth` at a ve
Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing...
CVE-2026-13019
Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication for crit
Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages
CVE-2026-26193
### Summary Manually modifying chat history allows setting the `embeds` property on a response message, the content of w
Open WebUI vulnerable to Stored XSS via iFrame in citations model
CVE-2026-26192
### Summary Manually modifying chat history allows setting the `html` property within document metadata. This causes the
Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions
CVE-2025-46719
### Summary A vulnerability in the way certain html tags in chat messages are rendered allows attackers to inject JavaS