AngleSharp HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass
CVE-2026-54570
### Summary The HTML specification requires that a MathML `` element with `encoding="text/html"` or `encoding="applicati
2026-07-18 归档
今日共收录 1491 条安全情报，包含 418 个 CVE，581 篇安全通告，以及 194 篇研究论文。
← 返回归档列表TAK-PS-Stats Web UI: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard
CVE-2026-54546
### Summary `PUT /api/basemap` (the basemap import endpoint) fetches an attacker-supplied URL server-side with **no SSR
meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token
CVE-2026-54547
## X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token ### Summary `AuthInjectionMiddleware` in `meta-ads-
meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch
CVE-2026-54549
## Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch ### Summary The `upload_
plone.app.textfield: Stored XSS by spoofing mime type
CVE-2026-54503
### Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whene
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user...
CVE-2026-9202
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1...
CVE-2026-9198
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER toke
Improper neutralization of special elements used in an SQL command ('SQL injection')...
CVE-2026-8297
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics En
An unauthenticated reflected cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox...
CVE-2026-9585
An unauthenticated reflected cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition version 8.
Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing...
CVE-2026-12694
Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Proper
A flaw was found in the authentication configuration endpoint of the keycloak-services component,...
CVE-2026-16104
A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engi
HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce...
CVE-2026-21762
HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce browser protections ag
A flaw was found in the admin REST API of Keycloak, a solution for identity and access management...
CVE-2026-16106
A flaw was found in the admin REST API of Keycloak, a solution for identity and access management. The issue occurs when
Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video...
CVE-2026-12693
Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessi
Unverified password change vulnerability in Vimesoft Inc. Enterprise Video Platform allows...
CVE-2026-12692
Unverified password change vulnerability in Vimesoft Inc. Enterprise Video Platform allows Authentication Bypass. This
vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio models
CVE-2026-34760
## Issue Description Librosa defaults to using `numpy.mean` for mono downmixing (`to_mono`), while the international sta
MCP Python SDK: WebSocket server transport does not support Host/Origin validation
CVE-2026-59950
### Summary In affected versions, the deprecated WebSocket server transport (`mcp.server.websocket.websocket_server`) ac
The Distributed Open-Source Vulnerability Ecosystem
该论文提出了一个概念框架，将漏洞管理描述为分布式信息交换和转换过程。作者追踪了漏洞信息从其创建、标准化、丰富化到依赖上下文的解释的完整生命周期。核心研究问题是：为什么不同的漏洞扫描器对同一软件清单会报告不一致的结果？论文识别出不一致结果的四
FlowGuard: From Signals to Evidence for MCP Security Detection
FlowGuard 是一项针对模型上下文协议（MCP）安全检测的研究。MCP 允许 LLM 代理通过元数据交换、工具调用和响应消费与外部工具交互，但现有安全扫描器主要依赖语义信号（如可疑字符串）而非实际执行行为，容易导致误报（例如，看似凭据
Routing Ceilings Are Domain-Independent: Structural Prior Injection in Code Security Vulnerability Detection
该论文研究了大型语言模型（LLM）在代码安全漏洞检测中的路由瓶颈问题。作者基于路由器假说（router hypothesis）——即模型虽具备潜在知识但缺乏稳定激活的内部路由——将此前在数学推理领域验证的结构先验注入方法（SAIR）迁移至源