An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled ...
CVE-2026-88340
An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vu
2026-09-23 归档
今日共收录 1513 条安全情报，包含 580 个 CVE，548 篇安全通告，以及 93 篇研究论文。
← 返回归档列表A vulnerability exists in an Analytics and Location Engine (ALE) component where the impacted...
CVE-2026-76711
A vulnerability exists in an Analytics and Location Engine (ALE) component where the impacted process improperly process
The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded...
CVE-2026-89281
The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability
A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the...
CVE-2026-76717
A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sensitive inf
Home Assistant: XSS in Statistics Graph Card
CVE-2026-91130
### Summary An authenticated party can add a malicious name to any statistics-capable entity, allowing for Cross-Site Sc
Home Assistant: mDNS Server-Side Request Forgery
CVE-2026-91129
## Summary Home Assistant Green is vulnerable to a Server-Side Request Forgery (SSRF) via the mDNS/Zeroconf IPP integra
Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle
CVE-2026-88010
## Summary Traefik's BasicAuth middleware coalesces concurrent credential checks through a `singleflight.Group` to avoi
lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function
CVE-2026-85725
### Summary When plaintext passwords are stored in AUTH_ACCOUNTS, the comparison uses Python's == operator which is not
Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs
CVE-2026-83805
### Impact This is an authorization bypass that escalates into unauthorized server-side job execution. 1. Primary impac
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode
CVE-2026-76805
A vulnerability in Nuclei's DAST/fuzz expression evaluation path allows a malicious target server to trigger disclosure
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass
CVE-2026-76804
A vulnerability in Nuclei's workflow template loader allows `file:` protocol templates to execute without the `-file` fl
Nuclei: Local File Read via MySQL Client Sandbox Bypass
CVE-2026-76803
A vulnerability in Nuclei's JavaScript MySQL client library allows arbitrary local file reads that bypass the `-allow-lo
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass
CVE-2026-76802
A vulnerability in Nuclei's DAST template loading path allows unsigned `code:` protocol templates to execute, bypassing
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability
CVE-2026-76819
A vulnerability in the Goja JavaScript engine used by Nuclei's `javascript:` protocol allows arbitrary native code execu
Tinyauth: Unauthenticated login attempts can trigger global login lockdown denial of service
CVE-2026-77561
### Summary Tinyauth's login rate-limit bookkeeping can enter a global lockdown mode when its in-memory login-attempt m
Tinyauth: forward-auth per-app ACL is matched case-sensitively against the (case-insensitive) hostname, letting an authenticated user reach apps they are not on the allowlist for
CVE-2026-77560
# tinyauth: forward-auth per-app ACL is matched case-sensitively against the (case-insensitive) hostname, letting an aut
Tinyauth: User enumeration attack by timing oracle
CVE-2026-77582
### Summary It's possible to enumerate users through a timing oracle. In other words: I can easily check if a username e
OpenBao Skips Stricter Deny Policy for LIST operations
CVE-2026-63131
## Impact When a policy operator has written `capabilities = ["deny"]` on a path with a trailing wildcard but allowed a
5G-Shark: A Network Security Auditor for 5G Subscriber Privacy and Unauthenticated Signalling Resilience
第五代移动通信标准在制定时被明确要求弥补长期存在的隐私与安全短板：隐藏用户永久身份（SUCI 加密与归属网络公钥机制）、抵御制式降级攻击、防止位置追踪。然而论文指出，要判断这些承诺在现网中是否真正兑现，必须区分两类此前研究未加区分、也缺乏现
Evaluating Coding Agents on Kernel Exploit Generation
该论文研究的是编码智能体（coding agents）在漏洞利用方向上的能力边界问题。研究背景是：当前编码智能体已能在生产软件中发现真实漏洞，但"能否发现 bug"并不等于"能否构造利用原语（exploit primitive）"，而后者才