Echelon: Auditable Aggregate-Only Language-Model Adaptation Across Privacy Boundaries

这篇论文提出了Echelon，一种面向跨组织语言模型适应的训练架构，其核心设计原则是强制设备级模型状态（包括参数、激活值、优化器状态及每设备更新）不得导出到管理边界之外，从而将隐私合规性作为系统不变量。与现有联邦学习框架不同，Echelon

历史摘要 · 未重新核验 · arXiv cs.CR

I-(OT)^2: A Client-optimal Oblivious Transfer Protocol for IoT Devices

不经意传输（OT）是隐私保护计算的基础密码学原语，广泛应用于安全多方计算、隐私信息检索、零知识证明、口令认证密钥交换等场景。尽管OT扩展技术显著降低了平均成本，但其依赖大量基础OT批次和预处理阶段，在传输次数较少或通信延迟、客户端计算受限的

历史摘要 · 未重新核验 · arXiv cs.CR

ContinuousBench: Can Differentially Private Synthetic Text Improve Capabilities?

差分隐私（DP）文本合成技术旨在通过生成合成数据来解锁敏感语料库，使其可用于模型训练，同时保护隐私。然而，现有评估基准存在重大局限性：它们使用的任务通常即使不经过训练也能近乎解决，因此强基准性能并不能证明DP合成数据能够替代原始数据访问。为

历史摘要 · 未重新核验 · arXiv cs.CR

On the Evaluation of Spiking Neural Network Configurations for Network Intrusion Detection

本文系统评估了脉冲神经网络（SNN）的不同配置（神经元模型与脉冲编码方案）在网络入侵检测中的性能。背景：传统深度学习模型计算需求高，难以部署到边缘设备和神经形态硬件，而SNN具有低功耗、事件驱动的特性，是潜在替代方案。但SNN的神经元模型和

历史摘要 · 未重新核验 · arXiv cs.CR

AMP: A Vendor-Neutral Wire Format for Agent Memory Operations

该论文提出了一个名为 memorywire 的供应商中立的线格式（wire format），用于代理内存操作。当前多种代理内存框架（如 mem0、Letta/MemGPT、Cognee、Zep/Graphiti、MemoryOS、MemTe

历史摘要 · 未重新核验 · arXiv cs.CR

SS-ZKR: Spatial-Semantic Zero-Knowledge Routing for Privacy-Preserving Multi-Agent Collaboration

该论文提出了一种名为SS-ZKR（空间语义零知识路由）的隐私保护路由协议，旨在解决现有代理互操作性标准（如Agent-to-Agent协议和模型上下文协议MCP）在跨组织信任边界传输时无法保护载荷内容隐私的问题。当前，尽管W3C去中心化标识

历史摘要 · 未重新核验 · arXiv cs.CR

IntraShuffler: A Privacy Preserving Framework for Heterogeneous DP Federated Learning

该论文针对联邦学习中异构差分隐私（HDP-FL）环境下的隐私泄露风险展开研究。在HDP-FL中，客户端可以根据自身政策选择不同的隐私预算（ε_i），服务器在聚合时利用ε值进行加权以提高模型效用，但这种ε感知聚合机制会暴露客户端的梯度结构模式

历史摘要 · 未重新核验 · arXiv cs.CR

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Versions prior to 7.260227.0 are vulnerable to XSS in the rendering of email...

CVE-2026-35212

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Versions prior to 7

历史摘要 · 未重新核验 · NVD

An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7.

CVE-2026-5385

An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. Thi

历史摘要 · 未重新核验 · NVD

React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted requests ca...

CVE-2026-42342

React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4

历史摘要 · 未重新核验 · NVD

React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could potentially allow unauthorized remote code executio...

CVE-2026-42211

React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps

历史摘要 · 未重新核验 · NVD

React Router is a router for React. In versions 7.0.0 through 7.14.0 and 6.7.0 through 6.30.3, certain URLs passed to the redirect function can trigger an open redirect to an ex...

CVE-2026-40181

React Router is a router for React. In versions 7.0.0 through 7.14.0 and 6.7.0 through 6.30.3, certain URLs passed to th

历史摘要 · 未重新核验 · NVD

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cro...

CVE-2026-34077

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Co

历史摘要 · 未重新核验 · NVD

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cro...

CVE-2026-33245

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Co

历史摘要 · 未重新核验 · NVD

React Router is a router for React. In versions 7.5.1 through 7.13.1, when using Framework Mode with pre-rendering enabled, improper neutralization of the HTTP `Location` header...

CVE-2026-33244

React Router is a router for React. In versions 7.5.1 through 7.13.1, when using Framework Mode with pre-rendering enabl

历史摘要 · 未重新核验 · NVD

CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity 15.2.x before 15.2.8441, 15.3.x before 15.3.8531, and 15.4.x before 15.4.8630 al...

CVE-2026-7201

CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity 15.2.x before 15.2.8441

历史摘要 · 未重新核验 · NVD

MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLER...

CVE-2026-3198

MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'l

历史摘要 · 未重新核验 · NVD

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/formFireWall. This manipulation of the argument Profile causes...

CVE-2026-10293

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/formF

历史摘要 · 未重新核验 · NVD

In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a missing pe...

CVE-2025-26418

In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when

历史摘要 · 未重新核验 · NVD

An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain administrative access.

CVE-2026-9614

An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticate

历史摘要 · 未重新核验 · NVD