Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth `X-Gitea-OTP` surface
CVE-2026-20779
### Summary I'm reporting **two related TOTP one-time-use defects** in Gitea that survive the CVE-2021-45331 fix. The 2
2026-07-22 归档
今日共收录 2277 条安全情报，包含 1464 个 CVE，419 篇安全通告，以及 96 篇研究论文。
← 返回归档列表Gitea: Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs
CVE-2026-57897
**Author:** Prakhar Porwal **Date:** 2026-05-24 **Target:** Gitea (self-hosted Git service) **Branch tested:** `main` @
Gitea: GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private
CVE-2026-58510
## Summary GHSA-8fwc-qjw5-rvgp ("Gitea may send release notification emails for private repositories to users whose acc
Gitea: Private org member list leaked via /members API endpoint — incomplete fix for PR #38145
CVE-2026-58427
## Summary PR #38145 fixed ListPublicMembers and IsPublicMember but missed ListMembers. Any authenticated user can enum
Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write
CVE-2026-27775
## Vulnerability Header | Field | Value
Gitea: ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests
CVE-2026-58436
### Summary The Locale middleware that runs in front of every unauthenticated request calls `golang.org/x/text/language
Gitea SSH Key Parser Denial of Service
CVE-2026-56657
Gitea's SSH key ingestion endpoint accepts keys in RFC 4716 (SSH2) format and normalises them before storage. The normal
Gitea: Repository Visibility Manipulation via Git Push Options
CVE-2026-58437
### Repository Visibility Manipulation via Git Push Options | Field | Value | |-------|-------| | **Affected File** | `
Gitea: OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009)
CVE-2026-55987
## Description Gitea's OAuth2 sign-in callback reactivates a deactivated user account (`IsActive=false`) when the user
Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm.
随着大型语言模型（LLM）的快速发展，其被恶意利用生成钓鱼内容的威胁日益突出。传统基于语法或语义的钓鱼邮件检测方法难以有效识别LLM生成的邮件，因为这类邮件通常没有拼写错误或其他明显特征，且能针对特定领域定制内容，成功率更高。现有的一些基于
A Tool for Safe and Accurate IoT Automation Rule Generation Using Large Language Models.
本文提出了 Ruleengine，这是一个利用大型语言模型（LLM）将用户的自然语言描述自动转换为有效且安全的物联网（IoT）自动化规则的工具。随着物联网设备的普及，用户倾向于使用自然语言来表达自动化需求，但将这种非结构化描述转化为平台特定
Firewall for AI
Firewall for AI
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
Background Security Improvements for iOS, iPadOS, and macOS