In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers...
CVE-2026-74727
In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers already removed from by
2026-08-23 归档
今日共收录 968 条安全情报，包含 250 个 CVE，385 篇安全通告，以及 68 篇研究论文。
← 返回归档列表In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix fib_nlmsg_size()...
CVE-2026-74657
In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops fi
Ivanti Endpoint Manager Mobile代码注入漏洞
根据知道创宇/Seebug（SSVID-99967）收录的漏洞信息，Ivanti Endpoint Manager Mobile 被报告存在代码注入漏洞。Ivanti Endpoint Manager Mobile 是用于管理和保护企业移动
A Logic and an Interactive Prover for the Computational Post-Quantum Security of Protocols.
该论文提出了首个面向协议计算后量子安全性的机械化证明体系。核心贡献是设计了一个新的计算一阶逻辑 PQ-BC，该逻辑相对量子攻击者是可靠的，并基于此实现了机械化证明工具 PQ-SQUIRREL（通过修改经典的 SQUIRREL 证明器并加入新
Your Router is My Prober: Measuring IPv6 Networks via ICMP Rate Limiting Side Channels.
本文提出了一种名为 IVANTAGE 的新型主动测量技术，利用 IPv6 节点强制实现的 ICMP 速率限制机制中的侧信道，将分布在全球 9500 个自治系统、182 个国家的约 110 万个远程路由器作为“观测点”，从而在仅使用单个本地观
EdgeTDC: On the Security of Time Difference of Arrival Measurements in CAN Bus Systems.
本文研究 CAN 总线系统中基于到达时间差（TDoA）测量的入侵检测方法的安全性。CAN 总线是车辆内部通信的事实标准，以鲁棒性和安全性为主要设计目标，但在实际部署中缺乏消息认证等常见安全功能。由于汽车供应商需要保证互操作性，大多数制造商依
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
根据知道创宇 Seebug 漏洞库收录的信息，Citrix NetScaler 存在一个内存泄漏漏洞，编号为 CVE-2025-5777。NetScaler 是 Citrix 提供的一款应用交付控制器（ADC）和负载均衡设备，广泛用于企业应
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike与Zscaler宣布合作，将连续身份认证能力引入零信任访问架构。该合作旨在将CrowdStrike的终端检测与响应（EDR）能力与Zscaler的零信任安全访问（Zscaler Zero Trust Exchange）
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike于2026年8月23日宣布推出一项面向AI代理的Continuous Identity（持续身份）功能，该功能旨在解决AI代理环境中的身份管理与安全挑战。随着企业越来越多地部署AI代理来处理敏感操作，传统的一次性身份验
Firewall for AI
根据Akamai官方产品页面，该公司推出了面向人工智能（AI）应用的专用防火墙产品“Firewall for AI”。该产品旨在为AI模型、API和相关基础设施提供安全防护，重点应对分布式拒绝服务（DDoS）攻击和僵尸网络流量。Akamai
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature...
CVE-2026-74702
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down...
CVE-2026-74691
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stoppi
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Always...
CVE-2026-74700
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Always acquire rtnl_lock when d
In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init_mm...
CVE-2026-74672
In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init_mm lock on huge vmap to av
Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter
CVE-2026-63462
## Summary An unauthenticated `POST` to any OpenAPI-validated endpoint, including the anonymous `POST /edge/validate` a
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function...
CVE-2026-78050
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub_41AD7C of the file /cgi-b
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that...
CVE-2026-47895
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but no
In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state...
CVE-2026-74720
In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic