PriSrv: Privacy-Enhanced and Highly Usable Service Discovery in Wireless Communications
该论文提出了一种名为PriSrv的隐私增强型服务发现协议，旨在解决无线通信中现有服务发现协议隐私保护不足、易泄露设备敏感信息并引发网络攻击的问题。PriSrv允许服务提供者和客户端在建立连接前指定细粒度的认证策略，通过双层匹配架构实现：外层
2026-06-08 归档
今日共收录 689 条安全情报，包含 45 个 CVE，322 篇安全通告，以及 73 篇研究论文。
← 返回归档列表GCD: Garbled, Corrected, Demonstrandum -- Fixing and Proving Go's Extended GCD Implementation
本文对 Go 标准库 `crypto/internal/fips140/bigmod` 中的 `extendedGCD` 实现进行了形式化验证。该实现用于 RSA 密钥对生成中的扩展欧几里得算法，是从 BoringSSL 移植而来。然而，研
Towards Worst-case Hardness for Low-Noise LPN
该论文研究了带噪奇偶学习（LPN）问题的困难性。LPN 是密码学中的基础假设，支持从对称密钥原语到公钥加密等多种构造。一个核心开放问题是：LPN 的平均情况困难性能否像 LWE 那样基于最坏情况复杂性假设。现有的最坏情况到平均情况归约（BL
A flaw has been found in kokke tiny-regex-c up to f2632c6d9ed25272987471cdb8b70395c2460bdb. This vulnerability affects the function matchstar of the file re.c of the component P...
CVE-2026-11478
CVE-2026-11478 影响 kokke 开发的 tiny-regex-c 库（截至 commit f2632c6d9ed25272987471cdb8b70395c2460bdb）。漏洞位于 re.c 文件中的 matchstar
WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows unauthenticated attackers to upload and execute arbitrary...
CVE-2023-54350
该漏洞存在于WordPress的Augmented-Reality插件中，涉及elFinder连接器存在远程代码执行漏洞。未认证的攻击者可通过向connector.minimal.php端点发送包含mkfile和put命令的POST请求，在
WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting null byte injec...
CVE-2022-50953
WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attack
WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting craft...
CVE-2021-47984
WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability that allows authenticated
WordPress Plugin Stripe Payments 2.0.39 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the AcceptSt...
CVE-2021-47983
WordPress Plugin Stripe Payments 2.0.39 contains a stored cross-site scripting vulnerability that allows authenticated a
WordPress Plugin WP-Paginate 2.1.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the prese...
CVE-2021-47982
WordPress Plugin WP-Paginate 2.1.3 contains a stored cross-site scripting vulnerability that allows authenticated attack
A security flaw has been discovered in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected is an unknown function of the file service/Reg...
CVE-2026-11474
A security flaw has been discovered in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a
A vulnerability was identified in jflyfox jfinal_cms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument ord...
CVE-2026-11473
A vulnerability was identified in jflyfox jfinal_cms up to 5.1.0. This impacts the function list of the file Advicefeedb
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /index1.php. This manipulation of the argume...
CVE-2026-11472
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /index2.php. The manipulation of the a...
CVE-2026-11471
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown fu
A vulnerability has been found in hs-web hsweb-framework up to 5.0.1. The affected element is the function denied of the file hsweb-system/hsweb-system-file/src/main/java/org/hs...
CVE-2026-11470
A vulnerability has been found in hs-web hsweb-framework up to 5.0.1. The affected element is the function denied of the
A flaw has been found in jishenghua jshERP up to 3.6. Impacted is the function insertPlatformConfig of the file jshERP-boot/src/main/java/com/jsh/erp/service/PlatformConfigServi...
CVE-2026-11469
A flaw has been found in jishenghua jshERP up to 3.6. Impacted is the function insertPlatformConfig of the file jshERP-b
A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=room_types. P...
CVE-2026-11468
A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some
A security vulnerability has been detected in jishenghua jshERP up to 3.6. This vulnerability affects the function addAccountHeadAndDetail of the file jshERP-boot/src/main/java/...
CVE-2026-11467
A security vulnerability has been detected in jishenghua jshERP up to 3.6. This vulnerability affects the function addAc
A security flaw has been discovered in songquanpeng one-api up to 0.6.11-preview.7. Affected by this issue is the function Redeem of the file model/redemption.go of the componen...
CVE-2026-11465
A security flaw has been discovered in songquanpeng one-api up to 0.6.11-preview.7. Affected by this issue is the functi
A vulnerability was identified in JeecgBoot up to 3.9.2. Affected by this vulnerability is the function queryPageList of the file src\main\java\org\jeecg\modules\system\controll...
CVE-2026-11464
A vulnerability was identified in JeecgBoot up to 3.9.2. Affected by this vulnerability is the function queryPageList of
A vulnerability was determined in USCiLab Cereal up to 1.3.2. Affected is an unknown function of the component Shared Pointer Handler. Executing a manipulation can lead to type ...
CVE-2026-11463
A vulnerability was determined in USCiLab Cereal up to 1.3.2. Affected is an unknown function of the component Shared Po