Next.js: Cache confusion of response bodies for requests with bodies
CVE-2026-64648
## Impact A server-side `fetch` with a request body may return a cached **response** body from a different request to t
2026-07-23 归档
今日共收录 1422 条安全情报，包含 546 个 CVE，469 篇安全通告，以及 113 篇研究论文。
← 返回归档列表Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences
CVE-2026-64647
## Impact A server-side `fetch` with a request body may return a cached **response** body from a different request to t
Next.js: Unbounded Server Action payload in Edge runtime
CVE-2026-64646
## Impact Requests targeting Next.js applications using App Router with at least one Server Action can lead to excessiv
Next.js: Unauthenticated disclosure of internal Server Function endpoints
CVE-2026-64643
## Impact In Next.js applications using App Router, Server Actions (`use server`) or `use cache` endpoints can be discl
Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale
CVE-2026-64642
## Impact Crafted requests targeting Next.js applications using App Router built with Turbopack and a **single** entry
Next.js: Denial of Service in App Router using Server Actions
CVE-2026-64641
## Impact Crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to
n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs
CVE-2026-65595
## Impact JWTs issued through the Token Exchange module were assigned all Public API key scopes, regardless of the acti
Careful About What App Promotion Ads Recommend! Detecting and Explaining Malware Promotion via App Promotion Graph.
本文针对安卓应用中恶意软件通过应用推广广告（app promotion ads）分发的新趋势，提出了一种名为ADGPE（App promotion ad Detection via Graph learning and UI Explora
Truman: Constructing Device Behavior Models from OS Drivers to Fuzz Virtual Devices.
虚拟设备是hypervisor的重要攻击面，其漏洞可能导致虚拟机逃逸甚至宿主机被攻破。现有模糊测试工具对虚拟设备的fuzzing效率有限，因为它们普遍缺乏对虚拟设备复杂行为的理解。本文提出Truman，一种新颖的通用模糊测试引擎，能够自动从
An Interactive Prover for Protocol Verification in the Computational Model.
本文针对安全协议设计中的正确性验证问题，提出了一种在计算模型下对任意会话数进行协议证明的交互式证明框架。作者在Bana和Comon等人先前工作的基础上进行了扩展，原始工作只能分析固定会话数且缺乏证明机械化支持。论文首先定义了一个元逻辑以及相
Research Report: Building a File Observatory for Secure Parser Development.
本文报告了一个名为“文件观测站”（File Observatory）的研究项目，旨在收集和分析大规模多样化的文件集合，以支持安全解析器的开发。项目背景是解析不可信数据极其困难，错误处理恶意构造的数据会导致广泛漏洞。语言理论安全（LangSe
Firewall for AI
Firewall for AI
Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack
Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breachi
Microsoft to stop Exchange 2016 / 2019 security updates in October
Microsoft has reminded customers that it will stop shipping security updates for Exchange 2016 and 2019 through the Exte
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7