Formal Analysis of BLE Secure Connection Pairing and Revelation of the PE Confusion Attack.
本文针对蓝牙低功耗（BLE）安全连接（Secure Connections）配对协议的安全性展开形式化分析。配对是 BLE 安全体系中的关键环节，决定了后续通信加密密钥的协商方式，因此其安全性直接影响设备间数据传输的机密性与完整性。作者构建
2026-08-04 归档
今日共收录 1122 条安全情报，包含 327 个 CVE，410 篇安全通告，以及 104 篇研究论文。
← 返回归档列表A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function ovpn-client.get_recommend_config of the file /cgi-bin/glc of the component ovpn-client....
CVE-2026-18602
A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function ovpn-client.get_recommend_conf
@fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.context, values that applications are documented to use for a...
CVE-2026-18248
@fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.cont
A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the function ovpn-client.check_config of the file /cgi-bin/glc of the component ovpn-client.so Native Pl...
CVE-2026-18601
A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the function ovpn-client.check_config of the fi
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-66317
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a n
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-66318
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-66316
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a ne
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)...
CVE-2026-66321
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-66326
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-66322
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a ne
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code...
CVE-2026-66315
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an...
CVE-2026-66314
Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized...
CVE-2026-66325
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofin
Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code...
CVE-2026-66312
Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based)...
CVE-2026-65804
Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized atta
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-66313
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-66311
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard...
CVE-2025-15627
A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to
AIOHTTP: HTTP request smuggling via WebSocket upgrade
CVE-2026-69243
### Summary The HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. ### Impact
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS