Label Studio through 1.23.0 Cross-Organization Storage URI Resolution
CVE-2026-85211
Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endp
2026-09-04 归档
今日共收录 1362 条安全情报，包含 399 个 CVE，552 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect
CVE-2026-85180
Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to r
Label Studio through 1.23.0 SSRF via Unvalidated Webhook URL
CVE-2026-85179
Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to interna
n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
CVE-2026-85167
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All
n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node
CVE-2026-85166
n8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the inline workflow JSON of nodes
netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
CVE-2026-80744
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables_offload: suppress WARN_ON_ONCE
btrfs: initialize inode mapping flags for cached inodes
CVE-2026-80734
In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached in
KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page
CVE-2026-80726
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when crea
SiYuan: Missing publish-access filter on getAttributeViewKeysByID discloses database column schema, plus two unscoped block-ID enumeration oracles (publish mode)
CVE-2026-72800
**CVE:** This vulnerability corresponds to [CVE-2026-72800](https://nvd.nist.gov/vuln/detail/CVE-2026-72800). ### Summa
SiYuan: Missing publish-access filter on getBlockAttrs and batchGetBlockAttrs discloses block attributes (name, alias, memo, custom fields) of protected documents
CVE-2026-72803
**CVE:** This vulnerability corresponds to [CVE-2026-72803](https://nvd.nist.gov/vuln/detail/CVE-2026-72803). ### Summa
SiYuan: Missing authorization on refreshBacklink allows anonymous readers to trigger persistent server-side writes and unauthenticated resource amplification (publish mode)
CVE-2026-72812
**CVE:** This vulnerability corresponds to [CVE-2026-72812](https://nvd.nist.gov/vuln/detail/CVE-2026-72812). ### Summa
toml-node: Uncontrolled Recursion
CVE-2026-77465
### Summary `toml.parse()` crashes with an uncaught `RangeError: Maximum call stack size exceeded` when parsing deeply
After Cheap Discovery: From unknown to known-and-unfixed
本文围绕自动化漏洞发现带来的安全态势变化展开论述，指出漏洞自动挖掘已消除了过去依赖专家注意力所形成的事实保护，而业界的应对集中在‘发现’和‘修复’两个环节，两者成本都在下降。作者认为，决定软件暴露面的并非这两条成本曲线，而是发布决策时的‘修
SAGA: A Security Architecture for Governing AI Agentic Systems.
随着基于大语言模型（LLM）的AI智能体（agent）越来越多地以自主方式相互交互、协作和委派任务，传统安全边界被打破，攻击面显著扩大。行业指南（如OpenAI白皮书）强调用户必须对智能体全生命周期保持控制与监督，以避免恶意智能体造成损害。
ProtocolGuard: Detecting Protocol Non-compliance Bugs via LLM-guided Static Analysis and Dynamic Verification.
本文提出了一种名为 ProtocolGuard 的新型漏洞检测框架，用于检测网络协议实现中的协议不合规（non-compliance）缺陷。这类缺陷通常源于开发者在实现协议规范时对状态转换、字段约束或时序逻辑的错误理解，可能导致安全问题或功
Automated Attack Synthesis by Extracting Finite State Machines from Protocol Specification Documents.
该论文提出了一种从协议规范文档（RFC）中自动提取有限状态机（FSM）的数据驱动方法，并将其应用于自动化攻击发现。网络协议的安全验证通常依赖攻击者合成或基于模型的模糊测试，但这些技术需要协议的正式表示，通常为FSM。然而，许多协议仅以英文散
Facilitating Vulnerability Assessment through PoC Migration.
该论文针对漏洞报告中软件受影响版本信息不完整的问题展开研究。作者指出，即使是由 MITRE/NIST 归档的漏洞报告，也常常缺少某些易受攻击的软件版本信息，导致使用这些未报告版本的用户面临风险。为此，他们提出了一种基于模糊测试（fuzzin
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier