9router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade
CVE-2026-56679
### Summary The `PATCH /api/settings` endpoint writes the entire request body to persistent settings without a field whi
2026-09-24 归档
今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding
CVE-2026-56678
### Summary The Kiro API-key validation endpoint builds an upstream URL using a user-controlled `region` value. By supp
Dynamic Conformance Testing of WebGPU Through Specification-Driven Mutation
WebGPU 是浏览器中面向 Web 应用暴露现代 GPU 能力的低层图形与计算 API，其正确性与安全性直接影响浏览器渲染进程。官方 WebGPU 一致性测试套件（CTS）主要验证“良构用法”是否符合规范，并不以语义边界情况或对抗性输入去
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
Background Security Improvements for iOS, iPadOS, and macOS
iOS 16.7.15 and iPadOS 16.7.15
iOS 16.7.15 and iPadOS 16.7.15
iOS 15.8.7 and iPadOS 15.8.7
iOS 15.8.7 and iPadOS 15.8.7
iOS 26.3 and iPadOS 26.3
iOS 26.3 and iPadOS 26.3
iOS 18.7.5 and iPadOS 18.7.5
iOS 18.7.5 and iPadOS 18.7.5
Android Code Search
Android Code Search
Android Devices
Android Devices
Secure an Android device
Secure an Android device
Android 16 QPR2
Android 16 QPR2
Mobile network security
Mobile network security