PrimSynth: An Agentic Approach to Discover, Validate, and Synthesize Exploit Primitives for Linux Kernel Vulnerabilities
Linux内核漏洞对下游系统安全构成严重威胁。现有自动化内核利用研究面临一个核心挑战：抽象利用策略与具体技术操作之间存在概念鸿沟。为填补这一缺口，本文提出一种系统性的利用原语表征方法，将六类利用原语从逻辑能力形式化到可验证效果；进而提出一种
2026-09-04 归档
今日共收录 1362 条安全情报，包含 399 个 CVE，552 篇安全通告，以及 120 篇研究论文。
← 返回归档列表A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing a manipulation of the argument name/...
CVE-2026-85405
CVE-2026-85405 是 Eleveo Call Recording Software 9.7.0 版本中存在的一个跨站脚本（XSS）漏洞。该漏洞位于 /callrec/roleAddAction.do 文件中的未知部分，攻击者通过
A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument fi...
CVE-2026-85403
CVE-2026-85403 是 code-projects Doctor Appointment System 1.0 中的一个SQL注入漏洞。受影响文件为 /contactus.php，问题核心在于对 firstname 参数的处理缺乏
A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the ar...
CVE-2026-85402
code-projects Doctor Appointment System 1.0 被发现存在 SQL 注入漏洞，具体位置在 /patient/booking.php 文件的 doc_id 参数。攻击者可以在无需身份验证的情况下，通过远
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php...
CVE-2026-85401
Dolibarr 是一个开源的企业资源规划（ERP）和客户关系管理（CRM）系统。本次漏洞编号为 CVE-2026-85401，由 NVD 收录，影响 Dolibarr 的多个版本：21.0.4、22.0.5 和 23.0.3 及更早版本（
A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/Pr...
CVE-2026-85399
CVE-2026-85399 影响 code-projects 开发的 Hospital Information System 1.0（医院信息系统）。漏洞位于 includes/presp/PrespController.php 文件中的
A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID l...
CVE-2026-85398
CVE-2026-85398 影响 code-projects Hospital Information System 1.0。该漏洞位于 viewReq.php 文件中的 viewReq 函数，攻击者可通过操纵参数 ID 触发 SQL 注
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the...
CVE-2026-85149
SmartIT Desktop Manager（由 Lightstar 开发）被发现存在一个使用硬编码凭据的安全漏洞。该漏洞源于 SmartIT Agent 应用程序的源代码中内置了固定的 SFTP 服务凭据。由于这些凭据是可预测且无法由用
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source...
CVE-2026-85147
SmartIT Desktop Manager是由Lightstar公司开发的一款桌面管理软件。CVE-2026-85147属于'使用硬编码凭据'类型漏洞。在软件源代码中，开发人员将某一特定密码以硬编码形式写入，未认证的远程攻击者若能够获取
Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain t...
CVE-2026-75754
CVE-2026-75754是ASUS Control Center中发现的一组高危漏洞组合。该软件用于集中管理企业内部的服务器、PC和工作站。漏洞包括关键功能缺少身份验证（Missing Authentication for Critic
A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument...
CVE-2026-85397
code-projects Hospital Information System 1.0 存在 SQL 注入漏洞，位于 addReq.php 文件的 findBySearch 函数中，由于对参数 Search 的输入过滤不严，导致攻击者可
A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/inv_del.php. Executing a manipulation of the...
CVE-2026-85383
CVE-2026-85383 是一个影响 itsourcecode Sales and Inventory System（销售与库存管理系统）1.0 版本的 SQL 注入漏洞。该漏洞位于 /pages/inv_del.php 文件中，具体涉
A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Impacted is the function htmlspecialchars_decode...
CVE-2026-85382
light0011 CMS 被报告存在一个跨站脚本（XSS）漏洞。该漏洞位于 Chapter 内容输出组件的 App/Home/View/Default/Chapter/oneChapter.tpl 模板文件中，受影响的函数为 htmlsp
Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kern...
CVE-2026-45200
CVE-2026-45200 是一个 GPU 驱动相关的内核漏洞。根据 NVD 描述，该漏洞允许以非特权用户身份安装和运行的软件向 GPU 驱动发送精心构造的 IOCTL 调用序列，从而通过操纵分配接口上的特定标志组合，在后续释放操作中触发
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU me...
CVE-2026-45197
CVE-2026-45197 是一个关于虚拟化环境中GPU内存隔离的漏洞风险。根据NVD提供的元数据，该漏洞影响了在Guest虚拟机内运行的内核软件与GPU固件之间的交互。具体而言，Guest虚拟机中的内核软件可能向GPU固件提交不当命令，
A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown pr...
CVE-2026-85381
CVE-2026-85381 是 light0011 CMS 项目（特定提交版本 c774dce31c6df0055568a8d5c53d964d99be199d 或 f72cf46f601efb2a0618c3814cc2f61380b3
A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects the function catchi...
CVE-2026-85380
CVE-2026-85380 是 light0011 CMS 在滚动发布版本（对应的 Git 提交 c774dce31c6df0055568a8d5c53d964d99be199d 和 f72cf46f601efb2a0618c3814cc
A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects the function ChapterModel::s...
CVE-2026-85379
该漏洞位于 light0011 CMS 的特定代码版本中（提交哈希 c774dce31c6df0055568a8d5c53d964d99be199d 与 f72cf46f601efb2a0618c3814cc2f61380b38930），具
京公网安备 11000002002063号
该输入并非有效的威胁情报内容。标题为“京公网安备 11000002002063号”，指向中国公安备案查询页面（beian.gov.cn），与正常网站备案信息相关，而非安全报告。尽管 source_name 标注为“360CERT 安全报告”
（总）网出证（京）字第281号
本次输入仅提供一条记录：标题为「（总）网出证（京）字第281号」，来源为360CERT安全报告，发布于2026年9月4日。标签标注了report、360、malware、apt，但正文摘要为空，未包含任何攻击活动描述、技术细节、组织归属、漏