In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must c...

CVE-2026-94502

In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentiall

来源摘录 · NVD

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the...

CVE-2026-96639

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation c

来源摘录 · NVD

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-47304

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature ov

来源摘录 · NVD

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-83789

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

来源摘录 · NVD

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the in-GHCB scratch area When setting the length of the GHCB sc...

CVE-2026-63939

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the in-

来源摘录 · NVD

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' Explicitly ignore Port I/O requests of length '0' (or coun...

CVE-2026-63940

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' E

来源摘录 · NVD

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-70153

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a

来源摘录 · NVD

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-70147

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a

来源摘录 · NVD

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.

CVE-2026-70157

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a

来源摘录 · NVD

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-controlled image bytes to Pillow through Image.open(BytesIO(data...

CVE-2026-115915

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-control

来源摘录 · NVD / GitHub Advisory

Ivanti Endpoint Manager Mobile代码注入漏洞

Ivanti Endpoint Manager Mobile代码注入漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug

【云原生智能网关】控制台独立上线

【云原生智能网关】控制台独立上线

历史摘要 · 未重新核验 · 腾讯云安全公告

Firewall for AI

Firewall for AI

历史摘要 · 未重新核验 · Akamai Security Research

[原创]Pwn2Own 击穿微软 Edge 全链路漏洞分析｜deepsec 攻防实录

[原创]Pwn2Own 击穿微软 Edge 全链路漏洞分析｜deepsec 攻防实录

历史摘要 · 未重新核验 · 看雪

[原创]ROP（Return-Oriented Programming）返回导向编程 · 游戏安全相关技术边界探索【2】

[原创]ROP（Return-Oriented Programming）返回导向编程 · 游戏安全相关技术边界探索【2】

历史摘要 · 未重新核验 · 看雪

Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win

A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer

历史摘要 · 未重新核验 · The Hacker News

China-Linked Hackers Exploit PHP2Shell to Root Firewalls

The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization

历史摘要 · 未重新核验 · SecurityWeek

Measuring Users' Security and Privacy Concerns About Third-Party Community Bots on Discord

Third-party community-based bots are central to how social platforms such as Discord work. They moderate content, manage

历史摘要 · 未重新核验 · arXiv cs.CR

SpecGuard: Detecting Multi-Turn LLM Jailbreaks via Specification-Based Runtime Monitoring

Multi-turn jailbreaks turn dialogue safety into a trace property: a violation may become identifiable only when user int

历史摘要 · 未重新核验 · arXiv cs.CR

CoSA: The Conflict of Skills Attack in Real-World LLM Agent Ecosystems

Agent Skills allow LLM agents to combine reusable capabilities, but checking each Skill in isolation cannot rule out pol

历史摘要 · 未重新核验 · arXiv cs.CR