Acknowledgements
Acknowledgements
2026-07-15 归档
今日共收录 995 条安全情报，包含 81 个 CVE，528 篇安全通告，以及 87 篇研究论文。
← 返回归档列表Large Language Models for Validating Network Protocol Parsers.
网络协议解析器是确保设备间正确与安全通信的关键组件，其缺陷可能导致内存破坏、信息泄露或拒绝服务等严重漏洞。传统验证方法（如模型检验、模糊测试、差异测试）要么需要大量人工投入，要么忽略协议标准本身，难以检测语义违规。本文提出 Parval——
Prezta: Provable Remote Execution of Zero-Trust Authorization using SNARKs
该论文提出了一种名为 Prezta 的新型零信任授权架构，旨在解决关键基础设施中工控系统安全现代化面临的挑战。传统的应用网关虽然能够执行复杂的授权决策并支持零信任架构，但带来了部署和管理负担，例如需要与远程边缘设备共置、保持安全补丁更新以及
9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote attackers to access sensitive user data by sending requests to ...
CVE-2026-62328
该漏洞影响 9Router 版本 0.4.41 及更早版本，属于未授权信息泄露漏洞。攻击者无需任何认证即可通过向未受保护的 API 端点发送请求，来枚举分页的请求日志，并检索完整的 AI 对话历史，包括系统提示、用户消息、助理响应、工具调用
An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network...
CVE-2026-5270
An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage
Illustrator is affected by an Improper Input Validation vulnerability that could result in...
CVE-2026-48334
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in t
Simple Machines Forum 2.1 prior to commit 4bf35cf and 3.0 prior to commit b4d23df contains a...
CVE-2026-61520
Simple Machines Forum 2.1 prior to commit 4bf35cf and 3.0 prior to commit b4d23df contains a server-side request forgery
Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition...
CVE-2026-48344
Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could resul
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path...
CVE-2026-48319
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit
ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command (...
CVE-2026-48324
ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulner
ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could...
CVE-2026-48325
ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could result in arbitrary co
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection')...
CVE-2026-48322
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result i
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary...
CVE-2026-48327
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege...
CVE-2026-48321
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacke
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path...
CVE-2026-48318
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that...
CVE-2026-48272
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary c
ColdFusion is affected by an Improper Input Validation vulnerability that could result in...
CVE-2026-48284
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in th
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote...
CVE-2026-15772
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised
Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote...
CVE-2026-15773
Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perf
NetLicensing-MCP: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode
CVE-2026-54446
## Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode ### Summary When `netlicensing-mcp` is run in