Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain
### Summary: 5 findings — unauthenticated full-API exposure (F1, lead Critical), read-side authorization gap that persi
2026-10-04 归档
今日共收录 931 条安全情报，包含 128 个 CVE，457 篇安全通告，以及 95 篇研究论文。
← 返回归档列表Ivanti Endpoint Manager Mobile代码注入漏洞
根据知道创宇 / Seebug 漏洞库于 2026 年 10 月 4 日发布的条目，Ivanti Endpoint Manager Mobile（原 MobileIron）存在一个代码注入漏洞。Ivanti Endpoint Manager
Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)
CVE-2026-71416
### Summary The Headroom WebSocket server does not validate the `Origin` header of incoming client WebSocket requests be
SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass
CVE-2026-74802
**High** ## Package gomod `github.com/siyuan-note/siyuan/kernel` ## Affected versions 3.7.3 ## Patched versions *(non
从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）
CVE-2026-71486
本文是先知社区发布的一篇研究型分析文章，主题为从 vLLM 的一个辅助 API（auxiliary API）出发讨论其资源边界（resource boundary）问题，对应漏洞编号 CVE-2026-71486。vLLM 是目前主流的开源
@a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions
CVE-2026-10032
### Summary The `openUrl` function in `@a2ui/web_core` passes an agent-controlled URL directly to `window.open()` witho
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike于2026年10月4日发布博客，宣布推出面向AI代理的持续身份（Continuous Identity for AI Agents）解决方案。该公告属于产品发布，而非威胁情报报告。标题表明CrowdStrike正在扩展
Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF
### Summary: 5 findings — `BashTool` shell-injection sink (F6, the canonical RCE primitive), `BackgroundRunTool` async
Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm
CVE-2026-104055
The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics using a dedicated "monitor
BLS12-381 key validation accepts a public key built on a foreign curve
CVE-2026-71891
In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicSc
MLS X.509 credential not bound to the LeafNode signature key
CVE-2026-71885
In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509
OpenPGP certification accepted from a subkey without certification authority
CVE-2026-71886
In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or tr
OpenPGP data signature accepted from a signing subkey without cross-certification
CVE-2026-71887
In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey who
The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be lev...
CVE-2026-84411
The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
ezBookkeeping 1.2.0 before 2.0.1 contains a privilege escalation vulnerability that allows...
CVE-2026-105131
ezBookkeeping 1.2.0 before 2.0.1 contains a privilege escalation vulnerability that allows attackers holding an API toke
SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers
CVE-2026-74904
Same CWE-862 family, found via an automated bulk sweep of every `/api/block/*` handler in `kernel/api/block.go` for the
Protocol Integration of Physical Layer Deception into EAP-TEAP Wi-Fi Authentication
该论文研究如何在企业级 Wi-Fi 认证链路中引入「物理层欺骗」(Physical Layer Deception, PLD) 作为凭据认证的补充验证手段。背景问题是:基于凭据的 EAP 认证只能验证「凭据是否正确」,无法区分合法的凭据持有