ovpn: tcp - use cached peer pointer in ovpn_tcp_close()
CVE-2026-64045
In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - use cached peer pointer in ovpn_tcp_clo
2026-07-20 归档
今日共收录 1577 条安全情报，包含 453 个 CVE，813 篇安全通告，以及 64 篇研究论文。
← 返回归档列表ovpn: respect peer refcount in CMD_NEW_PEER error path
CVE-2026-64044
In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in CMD_NEW_PEER error p
ovpn: fix race between deleting interface and adding new peer
CVE-2026-64043
In the Linux kernel, the following vulnerability has been resolved: ovpn: fix race between deleting interface and addin
Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents.
检索增强生成（RAG）系统通过从知识数据库中检索相关文档，并利用大型语言模型（LLM）处理这些文档来回答查询。本文发现，当RAG系统操作包含不可信内容的数据库时，容易受到一种称为“jamming”的拒绝服务攻击。攻击者可以向数据库中添加单个
EMS: History-Driven Mutation for Coverage-based Fuzzing.
基于突变的模糊测试是发现软件漏洞的主流方法之一，但传统突变过程的高随机性导致效率低下。近年来，覆盖引导的模糊测试通过采用自适应突变策略或集成约束求解技术，在一定程度上提升了对触发独特路径和崩溃的测试用例的探索能力。然而，现有方法普遍缺乏对模
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile（EPMM）是一款用于管理移动设备的端点管理平台。根据知道创宇/Seebug发布的漏洞公告（SSVID-99967），该产品存在一个代码注入漏洞，可能允许攻击者通过精心构造的输入在
Yokogawa YFGW410 gateway
Yokogawa YFGW410 gateway
Quantifying Blockchain Extractable Value: How dark is the forest?
该论文对区块链可提取价值（BEV）进行了全面的量化分析，旨在回答“BEV的黑暗森林到底有多暗”这一核心问题。研究覆盖了32个月内的以太坊区块链数据，涉及49,691种加密货币和60,830个链上市场。作者通过分析三种主要的BEV提取方式：三
Boosting the Performance of High-Assurance Cryptography: Parallel Execution and Optimizing Memory Access in Formally-Verified Line-Point Zero-Knowledge.
本文针对高保证密码学协议形式化验证实现中存在的性能瓶颈问题，提出了一套通用的优化方法。以 Line-Point 零知识证明（LPZK）协议为案例，首先在 EasyCrypt 中实现了一个形式化验证的 LPZK 实现（未考虑性能），然后通过三
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike与Zscaler宣布合作，将持续身份安全能力集成到零信任访问架构中。该合作旨在通过结合CrowdStrike Falcon平台的端点检测与响应（EDR）能力以及Zscaler的零信任网络访问（ZTNA）解决方案，实现基
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike于2026年7月20日宣布推出针对AI代理的持续身份认证解决方案（Continuous Identity for AI Agents）。该产品旨在应对AI代理（如大型语言模型、自动化脚本等）在运行时面临的凭证盗窃、权限
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
l2tp: use list_del_rcu in l2tp_session_unhash
CVE-2026-64119
In the Linux kernel, the following vulnerability has been resolved: l2tp: use list_del_rcu in l2tp_session_unhash An u
thunderbolt: property: Cap recursion depth in __tb_property_parse_dir()
CVE-2026-63891
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Cap recursion depth in __tb_
nfsd: fix posix_acl leak on SETACL decode failure
CVE-2026-53397
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak on SETACL decode failure
ksmbd: reject non-VALID session in compound request branch
CVE-2026-53383
In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request
The Cost of Performance: Breaking ThreadX with Kernel Object Masquerading Attacks.
本研究针对微控制器（MCU）为基础的物联网设备中常用的嵌入式实时操作系统（RTOS）的安全性问题展开分析。初步研究发现，FreeRTOS等流行RTOS缺乏基本的安全保护机制；而Zephyr OS和ThreadX虽已具备基本安全保护，但其系统
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
多款Huawei路由器信息泄露漏洞
多款Huawei路由器信息泄露漏洞