Distributed Deep Variational Approach for Privacy-preserving Data Release
本文针对联邦学习（FL）中梯度、模型更新和发布表示可能泄露敏感属性的隐私问题，提出了一种名为高斯隐私保护器（Gaussian Privacy Protector, GPP）的数据发布框架。GPP针对连续高维输入，学习一个随机编码器，将原始数
2026-05-06 归档
今日共收录 1285 条安全情报，包含 277 个 CVE，391 篇安全通告，以及 322 篇研究论文。
← 返回归档列表The 1-Bit Barrier is Universal: k-Stage Pipeline Composition and Unified Leakage Bounds for Standard Modular Reductions in PQC Hardware
该论文是系列正式验证分析掩码NTT（数论变换）硬件安全性论文的第7篇，针对后量子密码（PQC）硬件中的侧信道泄漏问题。论文证明了在任意深度k级流水线中，采用新鲜中间掩码和每级PF-PINI(≤2)小工具（gadgets）的掩码NTT实现，每
ChaRVoC: A Challenge-Response Voice Cancelable Authentication System
本文提出了一种名为 ChaRVoC 的挑战-响应语音可撤销认证系统，旨在解决语音认证中常见的重放攻击、模板不可撤销以及模板泄露等安全问题。该系统融合了三重安全因素：首先是用户固有的语音生物特征，其次是由用户记忆的密钥，用于实现模板的可撤销性
Probabilistic-bit Guided CDCL for SAT Solving using Ising Consensus Assumptions
本文提出一种混合SAT求解框架，将概率比特（p-bit）Ising采样器与冲突驱动子句学习（CDCL）求解器相结合。核心思路是：利用Ising采样器生成高一致性的文字（literals），作为临时假设传递给CDCL求解器，以引导搜索空间向可
Internet of Things Security: A Survey on Common Attacks
本文是一篇全面的物联网（IoT）安全综述，旨在系统性地分析和应对IoT环境中的安全威胁。随着IoT设备在智能城市、数字健康和工业4.0等领域的指数级增长，实时数据生成和智能决策支持成为可能，但同时也带来了严重的安全风险，主要源于设备的计算局
From TinyGo to gc Compiler: Extending Zorya's Concolic Framework to Real-World Go Binaries
本文介绍了 Zorya 符号执行框架的扩展，使其能够处理由 Go 标准 gc 编译器生成的多线程二进制文件。Zorya 框架最初仅支持单线程 TinyGo 二进制，通过将二进制提升到 Ghidra 的 P-Code 中间表示，并利用 Z3
The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.83. This is due to the 'Ai1wmve_S...
CVE-2026-5753
CVE-2026-5753 影响 WordPress 的 All-in-One WP Migration Unlimited Extension 插件（版本 ≤ 2.83）。该插件存在授权缺失漏洞，具体位于 'Ai1wmve_Schedul
The Mercado Pago payments for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'mp_pix_image' WooCommerce A...
CVE-2026-3208
该漏洞存在于WordPress的Mercado Pago支付插件中，影响版本直至并包括8.7.11。由于WooCommerce的'mp_pix_image' API端点缺少权限检查，未经身份验证的攻击者能够检索任意订单的PIX支付二维码图像
An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to retrieve th...
CVE-2026-7573
CVE-2026-7573 是一个影响 Velociraptor（Velocidex 开发的数字取证与事件响应工具）的授权绕过漏洞。该漏洞存在于 GetUserRoles gRPC API 端点中，属于 CWE-639（授权绕过）。在版本
An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a local atta...
CVE-2026-7572
CVE-2026-7572 是一个存在于 Velocidex Velociraptor 中的 off-by-one 错误（CWE-193），影响 Windows 和 Linux 平台上的 0.76.5 之前版本。该漏洞位于 ConsumeU
Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP mes...
CVE-2026-28780
Apache HTTP Server 的 mod_proxy_ajp 模块存在堆缓冲区溢出漏洞（CVE-2026-28780）。当 mod_proxy_ajp 作为反向代理连接到恶意的 AJP 后端服务器时，该恶意服务器可返回特制的 AJP
lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the find_line() function that allows an unprivileged user to delete...
CVE-2026-39402
CVE-2026-39402 是 Linux 容器运行时 LXC 中 setuid 辅助工具 lxc-user-nic 的一个逻辑缺陷漏洞。当 lxc-user-nic 执行删除操作时，其内部函数 find_line() 在对 NIC 数据
Gotenberg is an API-based document conversion tool. In version 8.29.1, an unauthenticated attacker with network access can force the server to make outbound HTTP POST requests t...
CVE-2026-39383
Gotenberg is an API-based document conversion tool. In version 8.29.1, an unauthenticated attacker with network access c
CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. For gRPC and ...
CVE-2026-35579
CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementati
Incus is an open source container and virtual machine manager. In versions prior to 7.0.0, the image import flow issues an outbound HEAD request to a user-supplied URL before va...
CVE-2026-35527
Incus is an open source container and virtual machine manager. In versions prior to 7.0.0, the image import flow issues
A vulnerability has been found in D-Link DI-8100 16.07.26A1. This vulnerability affects the function sprintf of the file /user_group.asp of the component CGI Handler. The manipu...
CVE-2026-7857
A vulnerability has been found in D-Link DI-8100 16.07.26A1. This vulnerability affects the function sprintf of the file
A flaw has been found in D-Link DI-8100 16.07.26A1. This affects an unknown part of the file /url_member.asp of the component Web Management Interface. Executing a manipulation ...
CVE-2026-7856
A flaw has been found in D-Link DI-8100 16.07.26A1. This affects an unknown part of the file /url_member.asp of the comp
In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltab_fetch_clients_cb() in contrib/mod_wrap2_sql.c allows a remote attacker to inject arbitrary SQL ...
CVE-2026-44331
In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltab_fetch_clients_cb() in contrib/mod_wrap
Masa CMS is an open source content management system. In versions 7.2.0 through 7.2.9, 7.3.0 through 7.3.14, 7.4.0 through 7.4.9, and 7.5.0 through 7.5.2, a SQL injection vulner...
CVE-2026-40330
Masa CMS is an open source content management system. In versions 7.2.0 through 7.2.9, 7.3.0 through 7.3.14, 7.4.0 throu
Masa CMS is an open source content management system. In versions 7.5.2 and earlier, a SQL injection vulnerability exists in the beanFeed.cfc component within the getQuery funct...
CVE-2026-40329
Masa CMS is an open source content management system. In versions 7.5.2 and earlier, a SQL injection vulnerability exist