Stateful Greybox Fuzzing.
本论文针对协议实现这类反应式系统中的状态相关（stateful）缺陷的模糊测试难题，提出了一种无需协议形式化规范即可自动识别状态变量并引导状态空间覆盖的灰盒模糊测试方法。作者观察到，在Top-50最广泛使用的开源协议实现中，所有实现都使用枚
2026-08-16 归档
今日共收录 1655 条安全情报，包含 947 个 CVE，388 篇安全通告，以及 62 篇研究论文。
← 返回归档列表The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege...
CVE-2026-19598
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization
ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
CVE-2026-53708
## Summary The `/admin/gateways/test` endpoint validates submitted URLs by resolving the hostname at validation time an
Ivanti Endpoint Manager Mobile代码注入漏洞
根据知道创宇/Seebug漏洞库（SSVID-99967）的公告，Ivanti Endpoint Manager Mobile（EPMM）存在代码注入漏洞。EPMM是Ivanti提供的一款企业移动设备管理（MDM）解决方案，用于集中管理企业
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
根据厂商安全公告标题，天融信（TOPSEC）防火墙产品存在远程可利用的安全漏洞，该漏洞被标记为“ELIGIBLEBACHELOR”。公告来源为知道创宇/Seebug漏洞库，但未提供详细的技术描述、影响版本或利用条件。由于缺乏具体漏洞成因和影
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Yokogawa YFGW410 gateway
Yokogawa YFGW410 gateway
【腾讯云认证】腾讯私有云交付运维工程师 - 里约智能网关认证下架公告
【腾讯云认证】腾讯私有云交付运维工程师 - 里约智能网关认证下架公告
EdgeTDC: On the Security of Time Difference of Arrival Measurements in CAN Bus Systems.
本文研究CAN总线系统中基于到达时间差（TDoA）测量的安全性。CAN总线是车辆内部通信的报文协议，主要注重鲁棒性和安全性，但缺乏消息认证等安全特性。由于汽车供应商需要保证互操作性，大多依赖ISO 11898标准，直接修改格式引入消息认证码
Your Router is My Prober: Measuring IPv6 Networks via ICMP Rate Limiting Side Channels.
该论文提出了一种名为 IVANTAGE 的新技术，用于远程测量 IPv6 网络，其核心思想是利用 ICMP 速率限制这一 IPv6 节点必需实现的机制作为侧信道。传统的主动测量往往需要大量远程观察点或对目标网络进行控制，而 IVANTAGE
Shorter and Faster Post-Quantum Designated-Verifier zkSNARKs from Lattices.
本文提出并实现了新的基于格的后量子指定验证者zkSNARK，目标是缩小后量子与预量子（经典）zkSNARK在证明大小上的巨大差距（当前约1000倍）。作者在指定验证者预处理模型下，结合二次扩域与秩2模格上的线性唯一向量加密，具体化了Bita
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Chromium: CVE-2026-19560 Use after free in Blink
CVE-2026-19560
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-19559 Use after free in HTML
CVE-2026-19559
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-19558 Use after free in Extensions
CVE-2026-19558
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-19557 Use after free in TabStrip
CVE-2026-19557
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-19556 Use after free in V8
CVE-2026-19556
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
本文是 CrowdStrike 官方博客发布的一则合作公告，宣布与 Zscaler 联合将连续身份安全（Continuous Identity）能力集成到零信任访问（Zero Trust Access）解决方案中。文章背景是两家安全厂商希望
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike于2026年8月16日发布公告，宣布推出面向AI代理的连续身份（Continuous Identity for AI Agents）功能。该功能旨在应对AI代理在企业环境中日益广泛使用所带来的身份与访问管理挑战，通过持
A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects...
CVE-2026-19918
A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function get_statu