A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some...
CVE-2026-94096
A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of
2026-09-21 归档
今日共收录 815 条安全情报，包含 111 个 CVE，394 篇安全通告，以及 53 篇研究论文。
← 返回归档列表A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown...
CVE-2026-94097
A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-
A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this...
CVE-2026-94095
A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown funct
A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy...
CVE-2026-94089
A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfa_aut
A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914....
CVE-2026-94031
A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is
Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local...
CVE-2026-94111
Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daemon WebSocket origin
A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function...
CVE-2026-94003
A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri of the file /c
The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion...
CVE-2026-82842
The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming
Conformal Privacy Auditing: Calibrated Re-identification Attacks with Statistical Guarantees
该论文针对文本数据发布场景中的身份再识别（identity leakage）风险，提出了一个名为 Conformal Privacy Auditing（CPA，共形隐私审计）的免分布校准框架。研究背景是：随着大语言模型（LLM）能力提升，攻
Transcript-Bound Combiners for Downgrade-Resilient Hybrid Post-Quantum Key Establishment: Definition, Proof, and Embedded-Device Cost
该论文研究混合密钥建立（hybrid key establishment）在缺少握手上下文认证时的降级风险。混合方案同时运行一个后量子 KEM（当前标准化的 ML-KEM）与一个经典 Diffie-Hellman 原语，使得只要其中任一组件
Micro-Collaborative Poisoning: A Distributed Attack on RAG Systems
检索增强生成(RAG)通过将大模型输出锚定在外部知识源上提升事实性，但这一依赖也使知识库本身成为投毒面。本文提出 Micro-Collaborative Poisoning(微协作投毒)，一种分布式投毒范式：攻击者不再把虚假目标主张集中写入
CASCADE Against Jailbreaks: Combination Across Stages with Controlled Attack-Defense Evaluation
该论文研究大语言模型（LLM）越狱攻击的防御问题。当前防御手段分布在推理流水线的不同阶段（例如输入改写/输入过滤、输出护栏/输出检测等），但业界仍不清楚每个阶段应部署哪类防御、以及应如何将它们组合使用。以往的实证研究由于攻击成功率定义不一致
TrustBOM: A Scalable Architecture for Confidentiality-Preserving SBOMs Across Organizations
该论文聚焦软件供应链治理中的一个现实矛盾:SBOM(软件物料清单)已成为企业架构中治理软件供应链的关键机制,但跨组织共享 SBOM 会暴露敏感的依赖信息(具体的第三方组件、版本、内部技术栈),出于商业机密与攻击面收敛的顾虑,供应商普遍不愿意
Towards TEE-Certified DP: Verifiable Differentially Private Training on Legacy GPUs
随着机器学习广泛部署，监管与政策对训练数据保护的要求日益严格，差分隐私(DP)成为关键技术；但一个研究不足的问题是，如何在不接触私有训练数据的前提下，由外部验证者认证已发布的模型确实按声称的 DP 保护完成训练。现有基于零知识证明等密码学方
A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. This issue affects some unknown processing of the file restore.cgi of the component Backup Restore. Pe...
CVE-2026-94099
该漏洞影响 Netcore(网月科技) NBR200V2 路由器固件版本 1.3.241127.071246, 问题位于其备份恢复(Backup Restore)组件所调用的 restore.cgi 处理逻辑中。攻击者通过对 QUERY_S
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability affects unknown code of the file /www/cgi-bin/upgrade of the component Firmware Upgrade ...
CVE-2026-94098
CVE-2026-94098 是 Netcore（磊科）NBR200V2 路由器固件版本 1.3.241127.071246 中被公开披露的一个高危命令注入漏洞。漏洞位于设备 Web 管理服务所暴露的固件升级 CGI 端点文件 /www/c
A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/network_tools of the component CGI Diagnostic Endpoin...
CVE-2026-94097
Netcore（磊科）NBR200V2 路由器固件版本 1.3.241127.071246 中被确认存在一处命令注入漏洞，编号 CVE-2026-94097。问题出在设备 Web 管理界面下的 CGI 诊断端点，对应文件路径为 /www/c
A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/network_tools of the component LAN IP ...
CVE-2026-94096
Netcore（磊科）NBR200V2 路由器固件版本 1.3.241127.071246 中被发现一个命令注入漏洞，编号 CVE-2026-94096。问题位于组件“LAN IP Configuration Handler”所调用的 /u
A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file /usr/bin/network_tools of the compon...
CVE-2026-94095
CVE-2026-94095 是 Netcore（磊科）NBR200V2 路由器固件 1.3.241127.071246 中的一处命令注入漏洞。受影响的是 Traceroute（路由追踪）诊断功能组件，其底层可执行文件 /usr/bin/n
Cloud & Application Security
Cloud & Application Security