QUASAR: A Quantum-Classical Neural Network for SAR Satellite Physical-Layer Authentication
该论文提出了一种名为 QUASAR 的量子-经典混合神经网络架构，用于 X 波段合成孔径雷达（SAR）卫星的物理层认证（PLA）。背景在于，X 波段（8-12 GHz）SAR 卫星在灾害响应、环境监测和军事侦察中至关重要，但现有 PLA 机
2026-08-22 归档
今日共收录 1353 条安全情报，包含 493 个 CVE，458 篇安全通告，以及 108 篇研究论文。
← 返回归档列表langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery
CVE-2026-72848
SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the documented restrict_to_same_d
EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover
CVE-2026-72843
The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/
NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input
CVE-2026-72818
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_RE and applied by TweetTokeniz
TREK: Cross-trip reservation title disclosure via file links
CVE-2026-62945
TREK is a collaborative travel planner. Prior to 3.1.3, TREK file upload, update, and link actions accept attacker-contr
TREK IDOR: any authenticated user can read another user's journey share token (full journey leak)
CVE-2026-54509
TREK is a collaborative travel planner. From 3.0.0 until 3.1.0, the GET /api/journeys/:id/share-link route in server/src
Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect
CVE-2026-50192
Kerberos Agent is an open source video (surveillance) management agent. Prior to version 3.6.26, the Kerberos Hub upload
BigBlueButton: IDOR on BBB through /api/graphql via POST parameter "presentationId" leads to Authentication Bypass
CVE-2026-55489
BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentation
BigBlueButton: Blind SQL Injection AUTH (Moderator)
CVE-2026-46682
BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton allowed authenticated moderators to in
Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode
CVE-2026-55893
Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point
Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode
CVE-2026-55894
Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c sh_disassemble() f
Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)
CVE-2026-67448
Mailpit is an email testing tool and API for developers. From 1.29.0 until 1.30.6, Mailpit's server/server.go origin mid
Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement
CVE-2026-67447
Mailpit is an email testing tool and API for developers. From 1.30.0 until 1.30.5, Mailpit's internal/smtpd/smtpd.go rea
Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection
CVE-2026-67445
Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit reads SMTP commands through internal/s
OTRS Community Edition OS Command Injection via PGP Configuration
CVE-2026-53804
OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that al
Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling
CVE-2026-67446
Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit decodes attacker-supplied image attach
DiceBear: SVG injection via the unescaped rotate option in @dicebear/core (and fontSize/fontWeight in @dicebear/initials)
CVE-2026-68921
DiceBear is an avatar library for designers and developers. Prior to 9.4.3, @dicebear/core interpolates the rotate optio
libvips: A well-crafted PPM image processed via a custom source could lead to possible heap buffer write overflow
CVE-2026-70654
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, applications that define unus
libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image
CVE-2026-70653
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-style Radiance RLE de
libvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map
CVE-2026-70652
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahd