Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count
CVE-2026-118782
### Summary forge.pkcs12.pkcs12FromAsn1() accepts a PKCS#12 MAC iteration count of zero (or less) from the input, and t
2026-11-01 归档
今日共收录 398 条安全情报，包含 188 个 CVE，99 篇安全通告，以及 64 篇研究论文。
← 返回归档列表Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message
CVE-2026-119188
### Summary A connection created with `forge.tls.createConnection()` throws an uncaught `TypeError` from `process()` wh
Forge: Denial of service in TLS record processing via call stack exhaustion
CVE-2026-119187
### Summary Connections created with `forge.tls.createConnection()` processed received TLS records recursively, one sta
PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over
Northflank security breach leads to abuse of customers' AI API keys
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its p
When Static Reachability Says No: Checking Joern-Based Negative Verdicts for Python Against Execution
A negative reachability verdict removes a finding from human review. We check such verdicts against execution. Our pipel
Trustworthy Distributed Machine Learning in Cloud-Edge-IoT Systems: A Heterogeneity-Aware Survey of Security, Privacy, and Robustness
Distributed machine learning (DML), including conventional distributed training and federated learning (FL), enables col
Enhanced image forensics through partial C2PA-based provenance information
Cryptographically verifiable C2PA-based Content Credentials (CCs) can be attached to freshly acquired or generated digit
A Minimally Informed Black-Box Fake-Report Attack on DRL Traffic-Signal Control
Deep reinforcement learning (DRL) traffic-signal controllers may use vehicle-to-infrastructure (V2I) reports, exposing t
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from parse_pdu_itt A transport that implements parse_pdu_itt h...
CVE-2026-99154
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from p
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the ITT reflected in a Reject PDU A Reject PDU carries a copy of the header it rej...
CVE-2026-99153
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the ITT reflected in a Rej
In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ir...
CVE-2026-98432
In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
CVE-2026-111357
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Con
The Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute...
CVE-2026-118438
The Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute values before processing
Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and re
New Android SMS of Death exploit can remotely crash unpatched phones
CVE-2026-58882
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS
The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '<fieldname>_start / <fieldname>_end' parameter in all ver...
CVE-2026-104926
The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '
minimatch has potential denial of service via globparts amplification
CVE-2026-118764
minimatch 10.2.6 contains an attacker-controlled pattern amplification in firstPhasePreProcess() when optimizationLevel
Forge: ASN.1 OID first arc truncation in asn1.oidToDer
CVE-2026-118775
### Summary `asn1.oidToDer()` did not range-check the first two arcs of an OID string, so an OID such as `0.42.840.1135
Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)
CVE-2026-118781
### Summary `BigInteger.prototype.modInverse()` in node-forge's bundled jsbn library enters an infinite loop when the v