IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...
CVE-2026-16468
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du
2026-09-23 归档
今日共收录 1513 条安全情报，包含 580 个 CVE，548 篇安全通告，以及 93 篇研究论文。
← 返回归档列表IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated...
CVE-2026-17645
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to gain elevate
IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated...
CVE-2026-16469
IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...
CVE-2026-17102
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-17635
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actio
OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys...
CVE-2026-95815
OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified logs as pub
ClipBucket v5 before 5.5.3-#182 contains a reflected cross-site scripting vulnerability in the...
CVE-2026-95812
ClipBucket v5 before 5.5.3-#182 contains a reflected cross-site scripting vulnerability in the sort_link() helper functi
A vulnerability exists in the internal administrative component of Analytics and Location Engine ...
CVE-2026-76709
A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful explo
lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to...
CVE-2026-87121
lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution
CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection() into a...
CVE-2026-88418
CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection() into a no-op on every state-c
Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses
CVE-2026-79913
**Summary** Cloudreve's server-side request forgery guard `ValidateExternalURL` (`pkg/request/ssrf.go`) resolves a user
Gardener: Authorization Bypass via Group Subject Injection
CVE-2026-79767
## Overview The `manage-members` custom verb authorization check in the Gardener API server's `customverbauthorizer` adm
Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service
CVE-2026-77633
## Summary Cloudreve v4 splits the storage-quota **check** (reading the user's `used` bytes and comparing them to `MaxS
Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR)
CVE-2026-94462
## Summary The Store API v3 endpoint `PATCH /api/v3/store/carts/:id/associate` binds a guest cart to the authenticated
Nautobot: Stored cross-site scripting (XSS) in object create/edit form help text
CVE-2026-83801
### Impact _What kind of vulnerability is it? Who is impacted?_ It has two related instances that share the same root c
Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation
CVE-2026-77528
### Summary Autobahn Python enforces `maxMessagePayloadSize` against the compressed WebSocket frame length before permes
POZZER: A Power Side Channel-guided Fuzzer for Black-Box Embedded Systems
该论文针对嵌入式系统固件漏洞挖掘中的黑盒难题提出了 POZZER——一种以功耗侧信道为反馈的模糊测试器。传统覆盖引导的固件模糊测试通常依赖固件插桩、硬件调试接口或固件重宿主(rehosting)来获取执行反馈, 这些手段都以能够访问固件源码
State-Aware Fuzzing of JavaScript Engines with LLM-Guided Instrumentation
该论文针对 JavaScript 引擎模糊测试中的“覆盖率平台期”问题提出了名为 StateLens 的框架。背景是：现代 Web 安全高度依赖 JS 引擎的正确性，而引擎本身极其复杂，仍不断暴露高危缺陷。当前最先进的模糊测试器主要依赖边覆
Rouxii: Exploiting Honeypots with Deception-Aware AI Pentesters
蜜罐的设计目标是欺骗攻击者，近期研究还发现蜜罐能够扰乱基于 LLM 的自主渗透测试智能体。然而，这类评测几乎都建立在同一个隐含前提上：攻击者并不知道自己正面对欺骗环境。本文研究的是相反的设定——攻击者被显式地赋予识别蜜罐指纹并据此行动的能力
C-to-Rust Fallacy: Automatic Refactoring != Memory Security
该论文针对当前兴起的“自动将 C 代码重构为 Rust 以消除内存安全缺陷”的做法提出了批判性实证评估。研究背景是：Rust 凭借编译期的内存与类型安全保证、且不牺牲性能，被广泛视为 C/C++ 的替代方案；但人工把 C 迁移到 Rust