A Note on Boosting Uncloneable Encryption in Microcrypt
本文探讨不可克隆加密（uncloneable encryption）在满足不可克隆不可区分性（uncloneable indistinguishability）这一强安全概念下的存在性问题。不可克隆加密是一种对称密钥加密方案，能够以极强的方
2026-05-30 归档
今日共收录 1277 条安全情报，包含 517 个 CVE，386 篇安全通告，以及 105 篇研究论文。
← 返回归档列表Cloak: Heuristic ORAM Optimization Through Fixed Temporal Distribution
本文提出Cloak，一种新型的 oblivious 存储系统，旨在解决传统 ORAM（Oblivious Random Access Machine）在真实场景中部署效率低下的问题。ORAM 通过隐藏用户对云端数据的访问模式来防止侧信道攻击
Domain-Informed Representation for Evolutionary Sieving in Integral and Module Lattices
这篇论文研究了格密码中的最短向量问题（SVP），这是现代抗量子密码体制（如基于格的密码）的安全基础。SVP 的求解难度决定了这些密码方案的安全性，但经典算法在较高维度下计算开销巨大。作者将 Laarhoven 等人提出的将筛法（sievin
Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem
本文报告了对AI智能体技能生态系统的安全威胁研究。作者从主流技能市场中收集了3,984个AI智能体技能，通过自动化静态分析和手动验证，发现其中76个包含确认的恶意负载，包括凭证窃取、后门安装和数据窃取等恶意行为。此外，13.4%的技能至少存
Assessor Experiences in CMMC Level 2 Certification Assessments: An Interpretative Phenomenological Analysis of Role Expectations
本研究聚焦于网络安全成熟度模型认证（CMMC）二级认证评估中评估者的实际经验，特别是他们在非咨询模式下如何理解和履行角色期望。CMMC项目要求第三方评估在非咨询模型下进行，以确保对寻求认证的组织的公正性，但评估者对这些约束的体验和解释尚缺乏
Symmetry Defeats Auditing
本文展示了一种针对内省适配器（Introspection Adapters）的攻击方法。内省适配器是一种用于审计大型语言模型内部状态的机制，旨在检测模型是否遵循安全约束。研究者发现，由于内省适配器依赖的对称性假设（例如，模型内部状态与审计信
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221, while investigating the ThreadPolicy::delete issue reported previously, the ...
CVE-2026-48810
FreeScout 是一个基于 PHP Laravel 框架的免费帮助台和共享收件箱系统。在版本 1.8.221 之前，其 ThreadPolicy::edit 方法存在权限检查缺失漏洞。具体来说，当用户拥有 PERM_EDIT_CONVE
Spatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in FileAdder::defaultSanitizer(). The sanitizer checks only the final filename suff...
CVE-2026-48557
Spatie Laravel Media Library 是一个用于 Laravel 框架的媒体文件管理库。在其版本 11.23.0 之前，FileAdder::defaultSanitizer() 方法存在文件上传限制绕过漏洞。该清理函数
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.44.0, When the server has called Server::set_trusted_proxies() with a non-empty trus...
CVE-2026-46527
cpp-httplib 是一个 C++11 的单文件头文件跨平台 HTTP/HTTPS 库。在 0.44.0 版本之前，当服务器调用了 Server::set_trusted_proxies() 并设置了非空的信任代理列表后，攻击者可以发送
iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, several Avro decoder paths read attacker-controlled 64-bit values from the wire format and either narrowed them to plat...
CVE-2026-46384
CVE-2026-46384 影响 iskorotkov/avro 项目（一个 Go 实现的 Avro 编解码库），版本低于 2.33.0。该漏洞包含多个子问题：首先，在 32 位平台（如 GOARCH=386, arm, mips, wa
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. ...
CVE-2026-45700
CVE-2026-45700 是一个存在于 FreeRDP（一个开源的远程桌面协议实现）中的堆越界写入漏洞。该漏洞影响 FreeRDP 3.26.0 之前的所有版本，具体位于平面位图解码器（planar bitmap decoder）中。在
Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a heap-buffer-overflow in librz/bin/format/omf/omf.c. This vulnerability is fixed by commit...
CVE-2026-45613
该漏洞存在于 Rizin 逆向工程框架中，具体位于 librz/bin/format/omf/omf.c 文件。在处理 OMF 格式的二进制文件时，存在堆缓冲区溢出漏洞。攻击者可以通过诱使用户打开特制的 OMF 文件来触发漏洞，可能导致信息
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.219, the password reset endpoint returns visually distinct responses depending on...
CVE-2026-45294
FreeScout 是一个基于 PHP 的 Laravel 框架构建的免费帮助台和共享收件箱系统。在版本 1.8.219 之前，其密码重置端点会针对提交的邮箱地址是否属于有效用户账户返回视觉上不同的响应（例如，存在账户时返回“重置链接已发送
Information Security in Small-Scale Protests: Surveillance of Ugandan Anti-EACOP Protesters
本文通过田野调查和半结构化访谈，深入研究了乌干达反EACOP（东非原油管道）气候活动家在政府监控与镇压背景下的信息安全实践。研究者于坎帕拉进行了为期五周的实地工作，采访了13名主要为学生群体的活动家。采用归纳分析法，揭示了这些小规模抗议者在
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6, the max option was being applied too late. When expand...
CVE-2026-45149
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's RDPEAR NDR parser accepts one non-null NDR pointer ref-id for multiple logical pointe...
CVE-2026-44422
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's RDPEAR NDR parser accepts on
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sendin...
CVE-2026-44421
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a h
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a heap-buffer-overflow write in FreeRDP's server-side clipbo...
CVE-2026-44420
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a h
FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, the JavaScript sandbox worker at projects/code-sandbox/src/pool/worker.ts:356 blocks dynamic import() with the r...
CVE-2026-44287
FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, the JavaScript sandbox worker at projects/code-sandbox/
FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, a Server-Side Request Forgery (SSRF) vulnerability allows an authenticated attacker to bypass the global isInter...
CVE-2026-44285
FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, a Server-Side Request Forgery (SSRF) vulnerability allo