Implementation and Optimization of HQC Decoding on NPU-Integrated Devices
本文研究了后量子密码方案 HQC（Hamming Quasi-Cyclic）在集成 NPU 的设备上的解码实现与优化。HQC 是 NIST 选定的码基密钥封装机制标准化候选，旨在提供与格基后量子密码不同的算法多样性。其解码过程主要由 Ree
2026-06-02 归档
今日共收录 1188 条安全情报，包含 407 个 CVE，402 篇安全通告，以及 101 篇研究论文。
← 返回归档列表Differentially Private Datastore Generation for Retrieval-Augmented Inference
本文针对现代端侧AI系统中依赖检索增强推理的数据存储发布所面临的隐私泄露风险，提出了一种基于差分隐私（DP）的数据存储生成框架。核心方法利用局部敏感哈希（LSH）将高维数据高效划分为桶（bucket），然后对每个桶的累计投票添加校准的拉普拉
Multidimensional Reconciliation in Continuous-Variable QKD: Review, Coding Schemes, and Open Source Simulation
连续变量量子密钥分发（CV-QKD）需要在极低信噪比和长距离条件下实现高效的调和（reconciliation）技术。多维调和（multidimensional reconciliation）通过将物理高斯量子信道转化为虚拟二进制输入加性高
Software Platform for Hybrid Pseudo-Random Sequence Generation and Predictability Analysis Based on LFSR and Mersenne Twister
该论文提出一个用户友好的软件平台，用于生成、分析和评估伪随机比特序列的可预测性。平台支持经典伪随机数生成器（如线性反馈移位寄存器LFSR和梅森旋转算法MT）及其混合结构，特别是LFSR-MT混合序列的复杂性和抗预测能力。平台集成了统计度量和
GPU Acceleration of Learning With Errors KEMs Using OpenACC for Post-Quantum Cryptography
该论文针对后量子密码学（PQC）中基于学习误差（LWE）问题的密钥封装机制（KEM）进行GPU加速研究。LWE问题被视为抵御量子攻击的关键困难问题，但其计算强度远超经典密码学原语。作者提出了一种基于纯LWE的KEM，并利用OpenACC编程
A Lightweight Hybrid MLP-Based Framework for Real-Time Phishing URL Detection Using Structural URL Features
该论文针对传统钓鱼URL检测方法（黑名单、规则匹配）对新出现的钓鱼URL反应迟缓的问题，提出了一种轻量级混合实时检测框架。框架结合黑名单预筛选与多层感知机（MLP）分类器，MLP仅利用URL的结构特征（如长度、域名层级、特殊字符统计等）进行
A flaw has been found in DedeCMS 5.7.88. Affected by this vulnerability is the function base64_decode of the file /plus/download.php?open=1. This manipulation of the argument Li...
CVE-2026-10581
DedeCMS 5.7.88 版本中存在一个服务器端请求伪造（SSRF）漏洞，位于文件 /plus/download.php?open=1 中。该漏洞源于 base64_decode 函数处理参数 Link 时未充分验证用户输入，攻击者可通
The Simple Custom Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the color settings fields (Page Background, Form Background, Text Color, Link ...
CVE-2026-10100
Simple Custom Login Page 是一款 WordPress 插件，用于自定义登录页面样式。在版本 1.0.3 及之前，该插件存在存储型跨站脚本（XSS）漏洞。漏洞源于颜色设置字段（页面背景、表单背景、文本颜色、链接颜色）在
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is an unknown function of the file /index.php. Executing a manipulation of the argumen...
CVE-2026-10559
该漏洞影响 SourceCodester Pizzafy Ecommerce System 1.0 版本。问题存在于 /index.php 文件中的未知函数，通过操纵 'page' 参数可导致文件包含。攻击者可以远程发送特制请求，包含任意文
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.23. This affects the function _sync_anthropic_entry_from_credentials_file of the file agent/credent...
CVE-2026-10548
CVE-2026-10548 是一个影响 NousResearch hermes-agent 项目（版本至 2026.4.23）的认证绕过漏洞。该漏洞存在于 agent/credential_pool.py 文件中的 _sync_anthr
The Slider Revolution plugin for WordPress in versions 6.0.0-6.7.55 and 7.0.0-7.0.14 is vulnerable to unauthorized modification of data. This is due to the plugin not properly v...
CVE-2026-9050
WordPress 的 Slider Revolution 插件（版本 6.0.0-6.7.55 和 7.0.0-7.0.14）存在未授权数据修改漏洞。该漏洞源于插件未能正确验证用户是否具有执行特定操作的权限，导致拥有 Contributo
A security flaw has been discovered in Orthanc DICOM Server up to 1.12.11. This issue affects the function DcmItem::read of the file OrthancFramework/Sources/DicomParsing/FromDc...
CVE-2026-10528
A security flaw has been discovered in Orthanc DICOM Server up to 1.12.11. This issue affects the function DcmItem::read
A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend/framework/src/main/java/cn/cordys/config/RequestParamTri...
CVE-2026-10514
A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend
A flaw has been found in itsourcecode Fees Management System 1.0. The impacted element is an unknown function of the file /manage_fee.php. Executing a manipulation of the argume...
CVE-2026-10302
A flaw has been found in itsourcecode Fees Management System 1.0. The impacted element is an unknown function of the fil
A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is an unknown function of the file index.php. Performing a manipulation of the argu...
CVE-2026-10301
A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is an unknown function of
eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that ...
CVE-2026-28511
eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user perfo
Memory corruption while using Strongbox due to buffer overflow.
CVE-2026-25277
Memory corruption while using Strongbox due to buffer overflow.
Memory corruption while using Strongbox due to missing bounds check.
CVE-2026-25276
Memory corruption while using Strongbox due to missing bounds check.
Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.
CVE-2026-25260
Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.
Memory corruption while processing multiple IOCTL command for escape operations.
CVE-2026-25259
Memory corruption while processing multiple IOCTL command for escape operations.