A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of...
CVE-2026-101264
A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the file /api/ZRnetwork
2026-09-29 归档
今日共收录 1279 条安全情报，包含 376 个 CVE，505 篇安全通告，以及 100 篇研究论文。
← 返回归档列表A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown...
CVE-2026-101263
A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRQ
A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an...
CVE-2026-101265
A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an unknown function of the c
mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd...
CVE-2026-102361
mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unaut
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown...
CVE-2026-101262
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/Z
A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file ...
CVE-2026-101261
A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetup_
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some...
CVE-2026-101260
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some unknown functionality of the
Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that...
CVE-2026-101093
Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to de
A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the...
CVE-2026-101187
A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function pop_usb_device of
LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT...
CVE-2026-93355
LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured ide
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...
CVE-2026-86950
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 2
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) <...
CVE-2026-100753
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) element to execute in th
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority
CVE-2026-84394
### Impact `fast-uri` accepts a host that contains an unbalanced or misplaced authority bracket (`[` or `]`) without re
ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass
CVE-2026-101910
### Summary No classifier on `Address6` recognizes the NAT64 local-use range `64:ff9b:1::/48` (RFC 8215). `isPrivate()`
Angular SSR: XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements
CVE-2026-88058
### Summary An XSS vulnerability exists in `@angular/platform-server` during server-side rendering (SSR) HTML serializat
Tracekit: Tamper-Evident Intent-Reasoning-Action Auditing for Autonomous Coding Agents
自主编码代理会读取不可信文件、执行 shell 命令并派生子代理，却几乎无人监督，而其行为记录通常只是一份可被随意编辑的日志，事后无法作为可信证据。论文提出 Tracekit：一个开源、无第三方依赖的审计系统，核心思路是为每个代理会话同时采
Continuous Assurance of Agentic Security Auditors for Software Delivery Decision Gates
这篇论文关注一个正在快速成形的工程问题：当大语言模型（LLM）驱动的代码仓库审计器（repository auditor）被部署进持续集成（CI）流水线、充当 SDLC 安全控制时，它给出的结论会直接决定一次软件变更被允许合并、被阻断还是被
HESP: Separating What to Probe from When to Stop in Local LLM Alert-Triage Agents
该论文针对安全运营中心（SOC）告警量远超分析师处理能力的现实困境，聚焦于一类特殊但普遍受限的部署场景：组织因合规或数据主权要求，无法将遥测数据上传到托管式大模型，只能在本机构硬件上使用小参数开放权重模型（如 Qwen2.5、Llama-3
Share-Borne AI Virus: Memory-Hopping Attacks Across LLM Agents
论文研究的是有状态大模型助手之间的自我传播式攻击。当前 LLM 越来越多被部署为跨会话保留记忆、并能调用工具读取/修改/创建持久化产物（artifact，例如报告、文档、文件）的助手；这些产物会在用户与助手之间共享流转，从而在原本相互独立的
Ask Without Telling: Local SLMs Consult Cloud LLMs Without Revealing Task Intent
随着本地小语言模型（SLM）与能力更强的云端大语言模型（LLM）协作日益普遍，一个自然的隐私问题浮现：本地 SLM 能否在获得云端 LLM 指导的同时保护用户隐私？现有隐私保护 SLM-LLM 框架主要隐藏敏感数值而保留任务语义，但任务语义