RADIUS/UDP Considered Harmful.
本文披露了 RADIUS 协议中一个存在数十年的协议级漏洞。RADIUS 是网络设备认证、授权和计费（AAA）的事实标准轻量级协议，广泛用于路由器、工业控制系统、VPN、企业 Wi-Fi（包括 Eduroam）、Linux PAM 以及移动
2026-08-02 归档
今日共收录 946 条安全情报，包含 146 个 CVE，466 篇安全通告，以及 75 篇研究论文。
← 返回归档列表FreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosure
CVE-2026-67292
FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport (libfreerdp/cor
FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response
CVE-2026-67297
FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses
Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation.
本文研究检索增强生成（RAG）系统中的成员推断攻击（Membership Inference Attack, MIA）问题。RAG 通过将外部知识库中的文档检索结果注入到大语言模型的上下文中，实现无需调整模型参数的接地生成。尽管不更新权重避
Automatically Detecting Online Deceptive Patterns.
本文针对数字界面中日益泛滥的欺骗性模式（deceptive patterns）提出了一种自动化检测框架 AutoBot。欺骗性模式利用用户的认知偏差和心理弱点，诱导其做出非本意的决策，常见于各类数字平台，对用户权益构成威胁。现有缓解措施主要
FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding:...
CVE-2026-67297
FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses
FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket...
CVE-2026-67292
FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport (libfreerdp/cor
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files
CVE-2026-54910
### Summary The `subtitlesHandler` endpoint (`GET /api/media/subtitles`) accepts two user-controlled query parameters:
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
@better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through <= 1.6.21 and >= 1.7.0...
CVE-2026-67330
@better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through = 1.7.0-beta.0 through <= 1.7.0-beta.9 contai
FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity...
CVE-2026-66402
FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity validation weaknesses in
The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via...
CVE-2026-15964
The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via unauthenticated password rese
vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API
CVE-2026-54725
## Summary The vault-secrets-webhook reads the `vault.security.banzaicloud.io/vault-addr` annotation from any ConfigMap
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
2026年8月，CrowdStrike 与 Zscaler 宣布合作，将连续身份验证能力与零信任访问架构深度集成。该合作旨在解决传统零信任模型下仅基于静态策略或单一登录验证的不足，通过持续评估用户身份、设备健康状态和行为风险，实现对每一次访
CrowdStrike Announces Continuous Identity for AI Agents
根据 CrowdStrike 官方博客（2026-08-02 发布）的标题，该公司宣布推出“Continuous Identity for AI Agents”功能。该功能旨在为人工智能代理（AI Agents）提供持续的身份验证与访问控制
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation
CVE-2026-55735
Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a vi
A Formal Analysis of SCTP: Attack Synthesis and Patch Verification.
该论文针对流控制传输协议（SCTP）开展形式化安全分析。SCTP 是一种提供多宿、多流和消息导向传输的传输协议，其两个主要实现已通过 PacketDrill 工具的一致性测试，但一致性测试并非穷尽，近期漏洞 CVE-2021-3772 表明