A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI...
CVE-2026-19188
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vul
2026-08-15 归档
今日共收录 1312 条安全情报，包含 424 个 CVE，492 篇安全通告，以及 116 篇研究论文。
← 返回归档列表IPvSeeYou: Exploiting Leaked Identifiers in IPv6 for Street-Level Geolocation.
本论文提出一种名为 IPvSeeYou 的新型隐私攻击，使远程且无特权的攻击者能够对大量住宅 IPv6 主机和网络进行街道级精度的物理定位。攻击核心利用了三项技术：首先，通过高速网络探测大规模获取嵌入在 IPv6 地址中的 MAC 地址，这
OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs
CVE-2026-73843
OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.2 and 1.1.2, internal/cluster-gate
Protocol Prying: Systematic Vulnerability Research in the AirDrop and Android Quick Share Proximity Transfer Protocols.
本文是首个针对 Apple AirDrop 与 Google/Samsung Quick Share 这两大近距文件传输协议的跨平台逆向工程与协议感知模糊测试研究。这两个协议被超过五十亿台设备使用，但因其实现均为专有且缺乏公开文档，其应用层
OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be...
CVE-2026-63650
OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the con
The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5...
CVE-2026-63649
The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated
ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
CVE-2026-53708
## Summary The `/admin/gateways/test` endpoint validates submitted URLs by resolving the hostname at validation time an
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the...
CVE-2026-19846
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setUrlFilterRules of
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
【腾讯云认证】腾讯私有云交付运维工程师 - 里约智能网关认证下架公告
【腾讯云认证】腾讯私有云交付运维工程师 - 里约智能网关认证下架公告
SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning.
该论文是一篇面向机器学习隐私推断风险的系统化知识（SoK）综述。研究背景是：机器学习模型在生产环境的部署可能使攻击者推断出与训练数据相关的敏感信息，已有大量文献分析了各类推断风险，如成员推断攻击、重建攻击等。受密码学中基于博弈（即概率实验）
Secure Graph Analysis at Scale.
本文提出了一个高度可扩展的安全计算图算法框架，用于保护图拓扑及节点/边关联数据的隐私。在该框架中，图的所有节点和边都以秘密共享形式分布在多个服务器上，服务器间通过安全计算协议协同计算，而不泄露任何图结构或节点属性信息。虽然该方案具有一定的普
Multi-Certificate Attacks against Proof-of-Elapsed-Time and Their Countermeasures.
本文研究基于可信执行环境（TEE）的区块链共识协议——消逝时间证明（Proof-of-Elapsed-Time, POET）的安全性。POET 要求每个参与节点在每轮区块领导者选举前等待一段随机指定的时间，并依赖 Intel SGX 等可信
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Chromium: CVE-2026-19560 Use after free in Blink
CVE-2026-19560
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-19559 Use after free in HTML
CVE-2026-19559
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-19558 Use after free in Extensions
CVE-2026-19558
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-19557 Use after free in TabStrip
CVE-2026-19557
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.