Rejetto HFS 远程命令执行漏洞(CVE-2024-39943)
CVE-2024-39943
Rejetto HFS 远程命令执行漏洞(CVE-2024-39943)
2026-07-17 归档
今日共收录 1302 条安全情报，包含 372 个 CVE，507 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Apache HugeGraph-Server Command Execution In Gremlin（CVE-2024-27348）
CVE-2024-27348
Apache HugeGraph-Server Command Execution In Gremlin（CVE-2024-27348）
Zabbix 后台延时注入(CVE-2024-22120)
CVE-2024-22120
Zabbix 后台延时注入(CVE-2024-22120)
CrushFTP 认证绕过漏洞（CVE-2024-4040）
CVE-2024-4040
CrushFTP 认证绕过漏洞（CVE-2024-4040）
Alert for CVE-2026-21992
CVE-2026-21992
Alert for CVE-2026-21992
Alert for CVE-2025-61884
CVE-2025-61884
Alert for CVE-2025-61884
Alert for CVE-2025-61882
CVE-2025-61882
Alert for CVE-2025-61882
Alert for CVE-2024-21287
CVE-2024-21287
Alert for CVE-2024-21287
Alert for CVE-2022-21500
CVE-2022-21500
Alert for CVE-2022-21500
Alert for CVE-2021-44228
CVE-2021-44228
Alert for CVE-2021-44228
Linux 内核提权 CVE-2026-31431(copy-fail)
CVE-2026-31431
Linux 内核提权 CVE-2026-31431(copy-fail)
Alert for CVE-2026-35273
CVE-2026-35273
Alert for CVE-2026-35273
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVE-2026-56171
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disc
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-62826
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo
Windows Backup Service Elevation of Privilege Vulnerability
CVE-2026-58598
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine all
Windows Admin Center Spoofing Vulnerability
CVE-2026-58643
Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an u
Windows Terminal Remote Code Execution Vulnerability
CVE-2026-59117
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.
On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline
该论文研究视觉语言预训练模型（VLPMs）的对抗攻击可迁移性问题。现有攻击方法普遍采用复杂管道，包括多阶段文本/图像攻击或复合损失函数，但作者发现这些方法存在三个被忽视的问题：不恰当的跨模态交互导致攻击效果不稳定、过度操作（如冗余的多阶段设
A Queueing-Stability Criterion for Causal IPD-QIM Network Flow Watermarking
该论文针对因果IPD-QIM网络流水印的队列稳定性问题展开研究。在Tor、级联VPN等多跳加密链路上，隧道传输会扁平化数据包长度和协议字段，使得包间延迟（IPD）成为主动流归因的主要载体。因果性要求嵌入器只能延迟数据包而不能提前，因此每个量
Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems
该论文研究了基于记忆的智能体系统中的提示注入攻击风险。随着智能体系统越来越多地通过记忆文件、行为偏好和知识库来维持跨会话的持久状态，这种设计提升了智能体的实用性和自我改进能力，但同时也引入了新的攻击面：恶意指令可以被嵌入持久文件中，从而影响