Citrix warns admins to patch new NetScaler RCE flaw immediately

Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScale

历史摘要 · 未重新核验 · BleepingComputer

The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is...

CVE-2026-104915

The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorizati

历史摘要 · 未重新核验 · GitHub Advisory

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of...

CVE-2026-108474

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions

历史摘要 · 未重新核验 · GitHub Advisory

Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout

CVE-2026-107804

## Summary In Nginx UI versions 2.2.0 through 2.5.x, the official bundled reverse-proxy topology did not preserve the e

历史摘要 · 未重新核验 · GitHub Advisory

Tina: Code injection via unescaped Git branch name in generated client source

CVE-2026-108259

### Summary `@tinacms/cli` inserts the raw Git branch value into the generated `client.ts` source without escaping or e

历史摘要 · 未重新核验 · GitHub Advisory

Contao: Cross-site scripting in the comments bundle

CVE-2026-107845

An unauthenticated front end visitor can post a comment containing a XSS injection. The victim is any back end user who

历史摘要 · 未重新核验 · GitHub Advisory

Vikunja: TOTP secret is readable after enrollment, no step-up auth

CVE-2026-91982

### Summary Once a user has TOTP enabled, the API still hands back the raw shared secret to anyone holding that account'

历史摘要 · 未重新核验 · GitHub Advisory

Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access

CVE-2026-62376

### Summary Vikunja stores password-reset, email-confirmation, and account-deletion tokens in the `user_tokens` table i

历史摘要 · 未重新核验 · GitHub Advisory

Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeover

CVE-2026-62367

## Summary With the per-provider OIDC `emailfallback` option enabled, Vikunja links an SSO login to a pre-existing **lo

历史摘要 · 未重新核验 · GitHub Advisory

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital)...

CVE-2026-90983

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile allows Aut

历史摘要 · 未重新核验 · GitHub Advisory

SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that...

CVE-2026-104083

SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers

历史摘要 · 未重新核验 · GitHub Advisory

Nginx UI: Node Secret Credential Exposure via URL Query Parameter

CVE-2026-107807

## 1. Vulnerability Summary nginx-ui's `Node.Secret` is a master credential that bypasses all JWT/password authenticati

历史摘要 · 未重新核验 · GitHub Advisory

ORCAGen: Orchestrating Context-Aware Malware Deception with RAG-Guided Generative AI

Malware defenses often remove or isolate suspicious programs as quickly as possible. While effective for containment, th

历史摘要 · 未重新核验 · arXiv cs.CR

A Security Meta-Model for Retrieval-Augmented Generation Systems

Retrieval-Augmented Generation (RAG) systems extend large language models (LLMs) with external knowledge through a multi

历史摘要 · 未重新核验 · arXiv cs.CR

LTBD: Learnable Trust-Boundary Delimiters for Prompt Injection Defense

Large language models (LLMs) perform remarkably well on complex tasks, yet remain highly vulnerable to prompt injection

历史摘要 · 未重新核验 · arXiv cs.CR

SoK: Are LLMs Reliable at Source Code Recovery? A Taxonomy and Empirical Evaluation

Effective source recovery is critical to security applications such as malware analysis, vulnerability assessment, and l

历史摘要 · 未重新核验 · arXiv cs.CR

Language Modeling is Monotone Compression

A long-standing hypothesis in artificial intelligence and neuroscience posits that intelligence is closely related to co

历史摘要 · 未重新核验 · arXiv cs.CR

Nullify: Null-Space Activation Steering for Training-Free LLM Unlearning

Large Language Models (LLMs) inevitably internalize substantial amounts of sensitive or private information during pre-t

历史摘要 · 未重新核验 · arXiv cs.CR

Sensitive-Topic Leakage Through LLM Routing Metadata: Measurement and Mitigation

LLM routers pick a cheap or expensive model per request by its content, and many gateways and some cloud platforms can l

历史摘要 · 未重新核验 · arXiv cs.CR

From Investigation Failures to Reliable SOC Agents: Understanding and Improving LLM-Based Alert Triage

Security operations centers (SOCs) must triage large volumes of alerts, most of which are benign, while missed attacks c

历史摘要 · 未重新核验 · arXiv cs.CR