Ivanti Endpoint Manager Mobile代码注入漏洞
本次通报来自知道创宇 / Seebug 漏洞库（条目 ssvid-99967），标题为「Ivanti Endpoint Manager Mobile 代码注入漏洞」。Ivanti Endpoint Manager Mobile（EPMM，前
2026-10-05 归档
今日共收录 815 条安全情报，包含 115 个 CVE，364 篇安全通告，以及 81 篇研究论文。
← 返回归档列表从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）
CVE-2026-71486
先知社区（阿里云安全社区）于 2026-10-05 发布一篇社区研究文章，标题为《从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）》，标签为 community / xianzhi / research，属于社区研究
Citrix patches NetScaler SAML zero-day exploited in attacks
CVE-2026-88779
2026 年 10 月 4 日，BleepingComputer 报道 Citrix 针对 NetScaler（原 ADC / Gateway）产品线发布紧急安全更新，修复一个编号为 CVE-2026-88779 的零日漏洞。该漏洞位于 N
ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login...
CVE-2026-105215
ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'ext
ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and...
CVE-2026-105207
ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
该条目来自知道创宇 / Seebug 漏洞库，标题标注为 Citrix NetScaler 的『内存泄漏』问题，编号 CVE-2025-5777，发布时间为 2026-10-05。Citrix NetScaler（含 ADC、Gateway
CrowdStrike Announces Continuous Identity for AI Agents
该条信息的来源是 CrowdStrike 于 2026-10-05 发布的官方博客，标题为《CrowdStrike Announces Continuous Identity for AI Agents》，正文摘要字段为空，因此以下内容基于
YesWiki before 4.6.7 Stored XSS via Bazar valeur Action
CVE-2026-104470 · CVE-2026-105224
YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors t
WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templates
CVE-2026-105089
WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission
ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback
CVE-2026-105215
ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'ext
Zitadel before 4.16.2 SSRF via Organization Domain HTTP Verification
CVE-2026-105214
Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server requ
ZITADEL before 4.17.3 Account Takeover via External IdP Linking
CVE-2026-105207
ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function...
CVE-2026-105144
A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function StaticFileRouter::route
Protocol Integration of Physical Layer Deception into EAP-TEAP Wi-Fi Authentication
论文针对的是企业级 Wi-Fi 认证中一个长期存在的结构性弱点：基于凭据的 EAP（可扩展认证协议）认证只能验证“凭据是否正确”，无法区分凭据的合法持有者与窃取/冒用凭据的攻击者。作者提出用物理层欺骗（Physical Layer Dece
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2