zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction

CVE-2026-115909

### Summary The symbolic-link branch of `ZipArchive::extract_internal()` allocates a buffer using an attacker-declared

来源摘录 · GitHub Advisory

Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass

CVE-2026-9086

### Description A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with

来源摘录 · GitHub Advisory

Keycloak vulnerable to authorization bypass via incorrect uri comparison

CVE-2026-9800

### Description A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass

来源摘录 · GitHub Advisory

@sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

CVE-2026-62264

### Impact When `@sylphx/pdf-reader-mcp` is run as an HTTP server (`MCP_TRANSPORT=http`), it reads the `MCP_API_KEY` en

来源摘录 · GitHub Advisory

PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox

CVE-2026-61438

### Summary JobWorkflowExecutor._exec_inline_python() is designed to safely execute inline Python expressions from YAML

来源摘录 · GitHub Advisory

systeminformation vulnerable to Windows command injection in services() through Unicode quotation marks

CVE-2026-116576

### Summary On Windows, `systeminformation@5.33.15` builds a PowerShell command using the value passed to `services()`.

来源摘录 · GitHub Advisory

Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win

A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer

来源摘录 · The Hacker News

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

CVE-2026-87692

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges local

来源摘录 · NVD

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83679

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

[原创]Pwn2Own 击穿微软 Edge 全链路漏洞分析｜deepsec 攻防实录

[原创]Pwn2Own 击穿微软 Edge 全链路漏洞分析｜deepsec 攻防实录

来源摘录 · 看雪

[原创]ROP（Return-Oriented Programming）返回导向编程 · 游戏安全相关技术边界探索【2】

[原创]ROP（Return-Oriented Programming）返回导向编程 · 游戏安全相关技术边界探索【2】

来源摘录 · 看雪

Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN

CVE-2026-20127

Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulne

来源摘录 · Cisco Talos

Windows 11 KB5127936 update released with 41 changes and fixes

Microsoft released the KB5127936 preview cumulative update for Windows 11 versions 25H2 and 26H2, with 41 changes, inclu

来源摘录 · BleepingComputer

Stable Channel Update for ChromeOS / ChromeOS Flex

CVE-2026-118307 · CVE-2026-118309 · CVE-2026-118331 · CVE-2026-118332 · CVE-2026-118339 · CVE-2026-118343 · CVE-2026-118346 · CVE-2026-118349 · CVE-2026-118358

M-156, ChromeOS version 16836.30.0 (Browser version 156.0.8078.77 has rolled out to ChromeOS devices on the Stable chann

来源摘录 · Google Chrome Releases

When Static Reachability Says No: Checking Joern-Based Negative Verdicts for Python Against Execution

A negative reachability verdict removes a finding from human review. We check such verdicts against execution. Our pipel

来源摘录 · arXiv cs.CR

Trustworthy Distributed Machine Learning in Cloud-Edge-IoT Systems: A Heterogeneity-Aware Survey of Security, Privacy, and Robustness

Distributed machine learning (DML), including conventional distributed training and federated learning (FL), enables col

来源摘录 · arXiv cs.CR

Enhanced image forensics through partial C2PA-based provenance information

Cryptographically verifiable C2PA-based Content Credentials (CCs) can be attached to freshly acquired or generated digit

来源摘录 · arXiv cs.CR

A Minimally Informed Black-Box Fake-Report Attack on DRL Traffic-Signal Control

Deep reinforcement learning (DRL) traffic-signal controllers may use vehicle-to-infrastructure (V2I) reports, exposing t

来源摘录 · arXiv cs.CR

Progressive-Observation Physical-Layer Fingerprinting for Efficient Open-Set Ethernet Authentication

Physical-layer fingerprinting (PLF) has emerged as a promising authentication approach for Internet of Things devices. H

来源摘录 · arXiv cs.CR

Classical Verification of Quantum Computation Beyond the Polynomial Hierarchy

It is not known whether a classical polynomial-time verifier can verify arbitrary polynomial-time quantum computations w

来源摘录 · arXiv cs.CR