NEBULA: A Language - Independent Specification for Opaque Rotating Refresh Tokens
刷新令牌是 OAuth 2.0 体系中最敏感的凭据之一，具有长期有效、Bearer 属性、可凭其换取访问令牌等特点。RFC 9700 虽要求对公共客户端发放的刷新令牌进行轮换、重用检测或发送方约束，但该 BCP 只规定策略，不规定线格式、存
2026-08-07 归档
今日共收录 1483 条安全情报，包含 647 个 CVE，430 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Progressive Learning of a Diffusion-based Inpainting Model for Separating Overlapped Fingerprints
重叠指纹是法医现场潜指纹和活体采集场景中常见的问题：传感器上残留的指纹会污染后续采集，犯罪现场提取的潜指纹也常包含多个叠加的摩擦脊线结构。传统分离方法主要依赖基于规则的方向场补全，需要较强的领域知识；而端到端的深度神经网络方法则未充分利用指
FBID: Adaptive Personalized Federated Learning for Robust Out-of-Distribution Attack Detection in IoT Networks
该论文提出了一种面向物联网（IoT）网络入侵检测的自适应个性化联邦学习（PFL）框架 FBID（Federated Bandit Intrusion Detection）。研究背景是：在异构 IoT 环境中，数据分布高度非独立同分布（non
Delay Attacks on the German Smart Metering Infrastructure: A Security Analysis of CLS Channel Timing Constraints
本文针对德国智能计量基础设施中可控制本地系统（CLS）信道传输的控制信号，系统研究了延迟攻击的可行性与潜在影响。研究结合理论分析与实验验证，威胁模型对齐了智能电表网关（SMGW）通用标准保护轮廓。结果显示，位于广域网（WAN）中的路径上攻击
Right Divisibility in Erasing Semi-Thue Systems: A Minimal View of Intruder Deduction
本文研究符号安全协议分析中的攻击者推导问题（intruder deduction problem），即判断攻击者能否利用可用的密码学操作从已观察消息中推导出目标消息。尽管收敛重写系统（convergent rewrite systems）提
Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/...
CVE-2026-71327
Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes
Traefik is an open-source edge router that makes publishing services a fun and easy experience. Prior to 2.11.54, 3.6.25, and 3.7.10, cross-namespace @kubernetescrd references a...
CVE-2026-71325
Traefik is an open-source edge router that makes publishing services a fun and easy experience. Prior to 2.11.54, 3.6.25
Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform unauthorized document store operations by accessing u...
CVE-2026-67621
Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perf
The Payment Gateway for Redsys & WooCommerce Lite WordPress plugin before 7.0.2 does not verify the authenticity of incoming payment-provider notifications for one of its paymen...
CVE-2026-12584
The Payment Gateway for Redsys & WooCommerce Lite WordPress plugin before 7.0.2 does not verify the authenticity of inco
A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. T...
CVE-2026-19006
A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tool
Nuxt is an open-source web development framework for Vue.js. From 3.21.7 until 3.21.10 and 4.5.1, mixed-case routeRules keys can fail to match case-folded lookups when router.op...
CVE-2026-71315
Nuxt is an open-source web development framework for Vue.js. From 3.21.7 until 3.21.10 and 4.5.1, mixed-case routeRules
Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev livebook allows an attacker to authenticate a victim's browser session under the attacker's own Livebook Teams id...
CVE-2026-66885
Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev livebook allows an attacker to authenticate a victim's b
IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledge_bases`). This occurs because user-supplied knowledge ba...
CVE-2026-7869
IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledg
A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (...
CVE-2026-20263
A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauth
A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the ac...
CVE-2026-20028
A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an authenticated, remote attacker
IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of URLs specified in custom resources.
CVE-2026-17617
IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to insuffici
Ground Station prior to 0.6.0 Unauthenticated DoS via service_control Socket.IO
CVE-2026-53985
Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's serv
MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection
CVE-2026-19041
A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageSe
Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCache
CVE-2026-66733
Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enque
smb/client: Fix error code in smb2_aead_req_alloc()
CVE-2026-64598
In the Linux kernel, the following vulnerability has been resolved: smb/client: Fix error code in smb2_aead_req_alloc()