Fingerprint-Driven Automation: Coupling Reconnaissance with POC Verification
本文针对网络安全对抗中的侦察环节，指出现有工具存在信息收集准确性低、隐蔽性不足、耗时较长、集成度不均衡以及功能扩展性差等问题，严重影响用户体验和工作效率。为此，作者设计并实现了一款高度自动化的侦察与漏洞验证工具。该工具将侦察与漏洞利用验证（
2026-08-02 归档
今日共收录 946 条安全情报，包含 146 个 CVE，466 篇安全通告，以及 75 篇研究论文。
← 返回归档列表Guarding Organizations Against Malware Risk: A Novel Graph-Based Malware Detection Method
随着组织数字化转型的深入，网络安全风险日益突出，恶意软件已成为一种普遍且破坏性极强的威胁。现有基于字节的机器学习检测方法虽然广泛应用，但容易受到攻击者通过操纵原始字节实施规避行为的影响。相比之下，基于图的方法通过将软件表示为捕获执行行为的程
Recover, Decode, Reguard: Guard-Agnostic Defense Amplification againstEncoded VLM Jailbreaks
该论文针对视觉语言模型（VLM）的安全防御问题，指出现有安全分类器（guard）作为主要黑盒防御手段，仅审查输入的表面形式而忽略其语义，导致恶意请求可以通过集合论、形式逻辑、罕见语言、代码或文本图像等编码方式绕过guard，形成“解码差距”
Formalization of security
本文是 Gilles Barthe 撰写的一篇关于安全形式化的章节，聚焦于证明助手（proof assistants）在安全领域中的应用。证明助手是一类交互式定理证明工具，如 Coq、Isabelle/HOL 等，能够对设计和实现进行严格的
Explicit Separations for One-Query Unitary Synthesis
本文研究量子计算中的酉算子合成问题。该问题由Aaronson和Kuperberg于CCC 2007年提出，核心是判断是否每个n量子比特酉算子U都能通过相对于某个依赖于U的经典预言机的高效量子电路来计算。最近，Lombardi、Ma和Wrig
Distributed Point Functions and Function Secret Sharing
本文是一篇关于分布式点函数（DPF）与函数秘密共享（FSS）的综述性论文。DPF是一种密码学原语，能够在两方或多方之间实现对秘密权重为1的向量（等价于点函数）的压缩加性共享。其核心优势在于构造轻量、通信高效，因此被广泛应用于各类安全计算场景
Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian....
CVE-2026-54894
该漏洞存在于 ueberauth guardian 库（版本 0.1.0 至 2.4.1 之前），属于资源无限制分配/未限流类型，可导致拒绝服务。Guardian.Plug.Keys 模块在派生连接和会话命名空间键时，将任意二进制直接传递给
guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers...
CVE-2026-67355
该漏洞影响 guzzlehttp/guzzle 库 7.15.1 之前的所有版本。Guzzle 是一个流行的 PHP HTTP 客户端，广泛用于服务器端应用发起外部请求。问题出在 Cookie 处理逻辑上：当 Guzzle 接收到响应中的
JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers ca...
CVE-2026-67338
JupyterLab 在 4.5.9 之前的版本中，扩展管理器存在一个存储型跨站脚本（XSS）漏洞。该漏洞源于扩展管理器在解析包元数据 URL 时未能验证 URI 协议。攻击者可以在 PyPI 上发布恶意的 Python 包，在项目元数据中
better-auth versions before 1.4.9 contain a two-factor authentication bypass vulnerability when session.cookieCache is enabled. Attackers with valid primary credentials can acce...
CVE-2026-67337
better-auth versions before 1.4.9 contain a two-factor authentication bypass vulnerability when session.cookieCache is e
better-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider and mcp plugins that advertise the none algorithm and accept plain PKCE by default...
CVE-2026-67336
better-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider and mcp plugins that adve
better-auth versions before 1.6.2 fail to validate the OAuth state parameter against the stored nonce when using cookie-backed state storage without PKCE. Attackers can forge th...
CVE-2026-67335
better-auth versions before 1.6.2 fail to validate the OAuth state parameter against the stored nonce when using cookie-
better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endpoints when secondaryStorage is configured and storeSessio...
CVE-2026-67334
better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endp
better-auth before 1.6.13 (and pre-release builds 1.7.0-beta.0 through 1.7.0-beta.3) fail to validate the scheme of redirect_uris registered via the deprecated oidc-provider plu...
CVE-2026-67333
better-auth before 1.6.13 (and pre-release builds 1.7.0-beta.0 through 1.7.0-beta.3) fail to validate the scheme of redi
@better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing clients to request tokens for unrelated resources. Attac...
CVE-2026-67332
@better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing
better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their creator by default, allowing authenticated users to manage other u...
CVE-2026-67331
better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their creator b
@better-auth/stripe versions >= 1.4.11 and < 1.6.21, and >= 1.7.0-beta.0 and < 1.7.0-beta.10, contain an authorization bypass in organization subscription actions. The middlewar...
CVE-2026-67329
@better-auth/stripe versions >= 1.4.11 and = 1.7.0-beta.0 and < 1.7.0-beta.10, contain an authorization bypass in organi
@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling that allow attackers to sign in as arbitrary users. Attac...
CVE-2026-67328
@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling
better-auth versions >= 1.1.3 and < 1.6.22 (and pre-release versions >= 1.7.0-beta.0 and < 1.7.0-beta.10) are vulnerable to account takeover via pre-account hijacking on magic-l...
CVE-2026-67327
better-auth versions >= 1.1.3 and = 1.7.0-beta.0 and < 1.7.0-beta.10) are vulnerable to account takeover via pre-account
GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attackers to inject arbitrary section headers into .git/config...
CVE-2026-67326
GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attac