File Browser: Authentication Bypass via Proxy Auth Header Forgery
CVE-2026-54089
## Summary When FileBrowser is configured with proxy authentication (`auth.method=proxy`), any unauthenticated attacker
2026-07-11 归档
今日共收录 1315 条安全情报，包含 488 个 CVE，410 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)
CVE-2026-59224
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, backend/open_webu
SiYuan: Unauthenticated SQLite Data Exfiltration via Template Injection in /api/icon/getDynamicIcon
CVE-2026-54068
### Summary The `/api/icon/getDynamicIcon` endpoint is explicitly excluded from authentication in SiYuan's kernel route
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile 存在代码注入漏洞，该漏洞允许攻击者通过向受影响组件发送特制的请求或输入，在目标系统上注入并执行任意代码。由于该平台用于管理企业移动设备，漏洞可能导致攻击者完全控制设备管理服务器，
Huawei Secoway USG firewall weak password
Huawei Secoway USG firewall weak password
Yokogawa YFGW410 gateway
Yokogawa YFGW410 gateway
Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security...
CVE-2026-57807
Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security Software Pvt Ltd. OAuth Si
The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for...
CVE-2026-12761
The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to auth
SiYuan: Stored XSS to RCE via attribute-view cell rendering in genAVValueHTML()
CVE-2026-54158
### Summary The attribute-view (database) cell renderer `genAVValueHTML` interpolates cell content raw in four of its b
Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL
CVE-2026-54072
## Summary The `/authorize` endpoint accepts any `redirect_uri` without validating it against `AllowedOrigins`. When `r
SiYuan: Stored XSS to RCE via CSS-snippet <style> breakout in renderSnippet()
CVE-2026-54067
### Summary A CSS snippet body containing `` breaks out of its surrounding `` tag when `renderSnippet()` interpolates i
Analyzing the iOS Local Network Permission from a Technical and User Perspective.
本文首次对iOS 14引入的本地网络权限进行了全面分析，从技术和用户两个维度展开。技术方面，研究者通过系统性地访问本地网络，发现两种通过WebView绕过权限的方法，并指出受保护的本地网络地址范围不足。通过对10,862个iOS和Andro
Poster: Few-Shot Inter-Domain Routing Threat Detection with Large-Scale Multi-Modal Pre-Training.
边界网关协议（BGP）作为互联网事实上的域间路由协议，面临不断涌现的安全威胁，严重影响互联网可靠性。现有的基于机器学习的BGP威胁检测方法需要大量标注数据和专家参与，成本高且劳动密集，同时无法充分利用互联网上持续生成的海量未标注BGP数据。
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike与Zscaler联合宣布合作，将持续身份安全引入零信任访问架构。该合作旨在结合CrowdStrike Falcon平台的端点检测与响应（EDR）能力以及Zscaler的零信任网络访问（ZTNA）解决方案，实现基于用户身
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike 于 2026 年 7 月 11 日发布博客，宣布推出针对 AI 代理的持续身份认证（Continuous Identity for AI Agents）功能。该功能旨在解决 AI 代理在运行时面临的身份和访问管理挑战
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents
本文提出了一种针对持久化AI代理的运行时防御框架TokenWall。持久化AI代理将大语言模型从单轮对话扩展为长期运行的软件系统，其不安全的语义内容可通过持久状态、可复用技能和工具中介交互传播，形成巨大的语义攻击面。作者观察到这类代理中大多
Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete
CVE-2026-59212
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 before 0.10.0, _verify_
Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)
CVE-2026-59213
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 before 0.10.0, get_all
Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)
CVE-2026-59217
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, the file upload p