LiftFuzz: Validating Binary Lifters through Context-aware Fuzzing with GPT.
本文提出 LiftFuzz，一个用于验证二进制提升器正确性的新型框架。二进制提升器将二进制代码翻译为中间表示（IR），广泛应用于逆向工程、二进制安全分析等场景，但其开发过程复杂且易出错。现有验证方法主要关注单条指令的正确性，忽略了指令间的交
2026-07-28 归档
今日共收录 1224 条安全情报，包含 453 个 CVE，382 篇安全通告，以及 98 篇研究论文。
← 返回归档列表Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <=...
CVE-2026-65437
Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <= 6.82 versions.
Pivotick contains a cross-site scripting vulnerability in the sidebar property-list component....
CVE-2026-66825
Pivotick contains a cross-site scripting vulnerability in the sidebar property-list component. Values associated with li
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile（EPMM）存在一个代码注入漏洞。该漏洞是由于EPMM在处理某些用户输入时未能正确进行输入验证或清理，导致攻击者可以通过特制的请求向服务器注入恶意代码。成功利用此漏洞的攻击者可以在
KnowGraph: Knowledge-Enabled Anomaly Detection via Logical Reasoning on Graph Data.
该论文提出了一种名为 KnowGraph 的新型图异常检测方法，旨在解决传统基于图神经网络（GNN）的方法在数据分布变化时泛化能力不足的问题。实际安全场景中（如交易网络欺诈检测、网络流量入侵检测），领域知识通常更稳定且已被广泛使用，但现有模
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike与Zscaler宣布合作，将持续身份安全整合到零信任访问架构中。该合作将CrowdStrike Falcon平台的端点检测与响应（EDR）能力与Zscaler的零信任网络访问（ZTNA）解决方案相结合，实现对用户身份的
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike于2026年7月28日发布博客，宣布推出针对AI代理的持续身份验证解决方案（Continuous Identity for AI Agents）。该方案旨在解决AI代理身份管理与安全挑战，确保只有经过授权的AI实体能够
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
CVE-2025-5777 是 Citrix NetScaler 产品中的一个内存泄漏漏洞。Citrix NetScaler 是一款应用交付控制器（ADC），广泛用于负载均衡、应用加速和安全防护。该漏洞源于软件在处理特定网络请求时未正确释放
SpecTaint: Speculative Taint Analysis for Discovering Spectre Gadgets.
针对Spectre类型侧信道攻击，软件补丁通过插入序列化指令来阻止潜在幽灵代码片段的推测执行，但现有方法难以有效检测所有幽灵代码片段。本文提出一种新颖的幽灵代码片段检测技术SpecTaint，通过在系统级（CPU模拟器内）模拟并探索推测执行
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <= 6.82 versions.
CVE-2026-65437
CVE-2026-65437 是一个影响 WordPress 插件 CleanTalk (Spam protection, AntiSpam, FireWall) 版本 6.82 及更早版本中的未认证跨站脚本 (XSS) 漏洞。该漏洞允许未
React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in <Link> and useNavigate. This issue is a follow u...
CVE-2026-53669
CVE-2026-53669 是 React Router 中的一个开放重定向漏洞，影响版本 6.0.0 至 7.17.0。该漏洞源于 <Link> 组件和 useNavigate 钩子对反斜杠（\）字符处理不严格，导致攻击者可以构造特制
React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow open redirects are vulnerable to XSS. An attacker could c...
CVE-2026-53668
CVE-2026-53668 是 React Router 中的一个开放重定向漏洞，可能导致跨站脚本（XSS）攻击。该漏洞影响 6.30.2 至 6.30.4 版本和 7.9.6 至 7.12.0 版本。攻击者可以构造恶意链接，利用应用程序
Firewall for AI
Akamai 推出了名为 'Firewall for AI' 的安全产品，旨在保护人工智能系统免受网络攻击，特别是针对 AI 模型的分布式拒绝服务（DDoS）攻击和僵尸网络（botnet）威胁。该产品结合 Akamai 的全球边缘网络能力，
NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techni
A stored cross-site scripting vulnerability existed in the capture tree visualization page. The...
CVE-2026-66824
A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the
A use-after-free issue was addressed with improved memory management. This issue is fixed in...
CVE-2026-64783
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and i
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6...
CVE-2026-64765
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in...
CVE-2026-64768
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.