Quasar: Prototype pollution in the extend() utility

### Summary `quasar@2.20.1`, the latest published version at the time of testing, appears to be vulnerable to prototype

历史摘要 · 未重新核验 · GitHub Advisory

Oh My Posh: Arbitrary command execution via template injection in the path segment

### Summary Oh My Posh re-renders the resolved path string, which contains the raw folder names taken from the filesyste

历史摘要 · 未重新核验 · GitHub Advisory

Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data

### Summary Oh My Posh renders dynamic, potentially attacker-controlled strings (the current directory name, Git commit

历史摘要 · 未重新核验 · GitHub Advisory

OmniFaces: Forged combined-resource IDs and related output/push boundaries

## 1. Forged combined-resource IDs `CombinedResourceInfo` accepts a path-derived ID without an authenticity check, infla

历史摘要 · 未重新核验 · GitHub Advisory

Shescape: Quadratic-time denial of service in the flag-protection

### Impact This impacts users of Shescape that have flag protection enabled, which is on by default, regardless of the

历史摘要 · 未重新核验 · GitHub Advisory

Shescape: Home-directory disclosure in assignment context on Unix with Dash

### Impact This impacts users of Shescape on Unix systems that explicitly configure `shell` to Dash, or `true` when the

历史摘要 · 未重新核验 · GitHub Advisory

Shescape: Shell injection via unescaped parentheses on Windows with CMD

### Impact This impacts users of Shescape on Windows that explicitly configure `shell` to CMD, or `true` with the defau

历史摘要 · 未重新核验 · GitHub Advisory

Shescape: Path disclosure on Unix with Zsh

### Impact This impacts users of Shescape on Unix systems that explicitly configure `shell` to Zsh, or `true` when the

历史摘要 · 未重新核验 · GitHub Advisory

OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API

### Summary An authorization bypass vulnerability exists in the file sharing mechanism of `Openlist`. Due to a flawed, n

历史摘要 · 未重新核验 · GitHub Advisory

OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search

### Summary An authorization bypass and information disclosure vulnerability exists in the search API of `Openlist`. Due

历史摘要 · 未重新核验 · GitHub Advisory

blaze: Unbounded WebSocket message aggregation in http4s-blaze-server

## Summary `http4s-blaze-server` aggregates the fragments of an incoming WebSocket message with no limit on total size

历史摘要 · 未重新核验 · GitHub Advisory

blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)

### Summary blaze-server can merge HTTP/1.1 chunked-body trailer fields into `Request.headers`. Because trailer fields

历史摘要 · 未重新核验 · GitHub Advisory

Poweradmin: OIDC `sub` collation bypass in Poweradmin leading to account takeover

## Preface Poweradmin maps OIDC identities into local users through `oidc_user_links.oidc_subject` plus `provider_id`.

历史摘要 · 未重新核验 · GitHub Advisory

Poweradmin: Broken access control (IDOR): any zone owner can modify DNS records in zones they do not own

## Affected software - Product: Poweradmin (web front-end for PowerDNS) - Version tested: master, commit 7f28c3a97 (als

历史摘要 · 未重新核验 · GitHub Advisory

Poweradmin: API user-update endpoint leads to a non-admin reset any user's password and take over the superuser account

### Summary The REST API user-update endpoint (`PUT/PATCH /api/v2/users/{id}` and the V1 equivalent) does not enforce t

历史摘要 · 未重新核验 · GitHub Advisory

Nginx远程代码执行漏洞分析与利用（CVE-2026-42530）

CVE-2026-42530

Nginx远程代码执行漏洞分析与利用（CVE-2026-42530）

历史摘要 · 未重新核验 · 先知社区

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

CVE-2026-16723

Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library fo

历史摘要 · 未重新核验 · The Hacker News

Edit-Neighboring Data Streams and Privacy under Continual Observation

本文研究持续观察（Continual Observation, CO）模型下的差分隐私（Differential Privacy, DP）问题。在CO模型中，敏感数据流随时间不断产生，算法实时发布输出，隐私损失随输出序列累积。传统CO隐私定

历史摘要 · 未重新核验 · arXiv cs.CR

Constant-time decoding of Gabidulin codes and their generalizations with application to RQC

本文首次提出了增广Gabidulin（AG）码的恒定时间解码算法。Gabidulin码是秩度量下的Reed-Solomon码类比，被用于基于秩的密码系统如RQC和Loidreau中。然而，此前缺乏恒定时间实现，这对于实际开发防侧信道攻击的密

历史摘要 · 未重新核验 · arXiv cs.CR

Taming the Security-Energy Paradox: A Green AI Approach to Optimized Android Malware Detection

随着Android恶意软件的日益复杂，深度模型被部署在移动设备上进行实时检测，但面临着安全性与能耗之间的权衡——高精度的检测模型往往导致设备电量快速耗尽。本论文针对这一安全-能量悖论，探索了多层感知机（MLP）模型在Android恶意软件检

历史摘要 · 未重新核验 · arXiv cs.CR