A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the component...

CVE-2026-113736

A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap o

来源摘录 · NVD

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Blind SQL Inject...

CVE-2026-111411

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Aut

来源摘录 · NVD

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab...

CVE-2026-111057

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4,

来源摘录 · NVD

The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection. This OS Command Injection vulnerability allows an authe...

CVE-2026-118477

The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection

来源摘录 · NVD

Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.2410 where user-controlled URLs are unsafely processed, lead...

CVE-2026-115904

Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.241

来源摘录 · NVD / OSV.dev

The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespace fields from the /exec/init and /exec/config JSON endpo...

CVE-2026-114278

The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespa

来源摘录 · NVD / OSV.dev

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization ...

CVE-2026-116692

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.

来源摘录 · NVD

jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments, even when those classes violate the declar...

CVE-2026-110879

jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its gene

来源摘录 · NVD

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an...

CVE-2026-113672

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.

来源摘录 · NVD

Citrix NetScaler 内存泄漏(CVE-2025-5777)

CVE-2025-5777

Citrix NetScaler 内存泄漏(CVE-2025-5777)

历史摘要 · 未重新核验 · 知道创宇 / Seebug

CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)

CVE-2026-111497

CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Sever

历史摘要 · 未重新核验 · Palo Alto Security Advisories

Go JOSE: Panics in JSON parsing

CVE-2026-116586

### Summary Parsing deeply nested JSON structures can hit Go's stack limit, causing the application to crash. Note: th

历史摘要 · 未重新核验 · GitHub Advisory

Classical Verification of Quantum Computation Beyond the Polynomial Hierarchy

It is not known whether a classical polynomial-time verifier can verify arbitrary polynomial-time quantum computations w

历史摘要 · 未重新核验 · arXiv cs.CR

UniPCH: A Unified Framework for Cross-Chain Payments via Payment Channel Hubs

Payment channel hubs (PCHs) enable private cross-chain payments, but existing protocols remain difficult to extend acros

历史摘要 · 未重新核验 · arXiv cs.CR

HqcLethe: Streaming HQC Encapsulation for Tiny Stateless Servers

Stateless post-quantum authenticated key exchanges such as post-quantum WireGuard hedge against unexpected cryptanalytic

历史摘要 · 未重新核验 · arXiv cs.CR

An Empirical Study of Undisclosed Charges in Hook-Based Decentralized Exchanges

Many decentralized exchanges use automated market makers (AMMs) to trade assets against liquidity pools. Modern AMMs all

历史摘要 · 未重新核验 · arXiv cs.CR

CASEL: Consequence-Aware Selective Execution for Reliable Long-Horizon Tool-Using Agents

Tool-using language agents increasingly modify external systems, yet most runtime safeguards allocate scrutiny by generi

历史摘要 · 未重新核验 · arXiv cs.CR

FIDES-Live: Evaluating Behavioral Concordance in Sequential Trading Agents

Sequential trading agents produce decisions, orders, execution receipts, account states, and reports that need not agree

历史摘要 · 未重新核验 · arXiv cs.CR

Split Federated Unlearning

Split federated learning (SFL) combines partitioned model execution with federated aggregation to support collaborative

历史摘要 · 未重新核验 · arXiv cs.CR

ORBITAL: Optimization of Robust Brain--Computer Inference Through Architecture-Aware Low-Precision Compression

Compact electroencephalography (EEG) decoders enable embedded brain--computer interfaces (BCIs), but compression can alt

历史摘要 · 未重新核验 · arXiv cs.CR