Cyclic Denoising Reveals Ultrastable Memories in Diffusion Models
这篇论文提出了一种名为“循环去噪”（cyclic denoising）的新型提取攻击方法，用于从图像扩散模型中提取训练数据中的记忆化图像。该方法受无序固体中随机组织的启发，通过在受控噪声幅度下重复进行前向和反向扩散过程，使得样本被驱动向具有
2026-06-26 归档
今日共收录 1370 条安全情报，包含 648 个 CVE，378 篇安全通告，以及 115 篇研究论文。
← 返回归档列表The Serialized Bridge: Understanding and Recovering LLM Serving Performance under Blackwell GPU Confidential Computing
本文研究了在 Blackwell GPU 机密计算（GPU-CC）环境下，LLM 推理服务性能显著下降的根本原因。作者在 NVIDIA RTX Pro 6000 和 B300 HGX 两个平台上进行了实验，发现性能瓶颈并非来自 GPU 计算
zQR: A Verifiable QR-Driven zkSNARK Proof Verification Framework for Mobile Platforms
该论文提出了一种名为zQR的新型框架，旨在移动平台上实现可验证的QR码驱动的zkSNARK（简洁非交互零知识证明）验证。研究背景是隐私保护技术在日常交互中应用有限，尽管零知识证明提供强隐私保证，但其技术复杂性阻碍了实际采用。核心问题是如何让
Physical Layer Authentication With Channel Knowledge Maps in Indoor Environments
本文针对室内移动设备场景下传统物理层认证（PLA）方法失效的问题，提出了一种基于信道知识地图（CKM）的新型PLA机制。在室内环境中，由于多径传播和遮挡，移动设备的信道特性快速变化，基于时间一致性或演化模型的传统PLA难以有效应用。该机制通
Design and Performance Evaluation of Secure RF and WiFi-Based Communication in Drone Swarms via Testbed Implementation
无人机蜂群依赖分布式协调和合作通信来实现可扩展操作、扩展覆盖以及监控和实时数据交换等应用。射频和WiFi等无线技术广泛应用于无人机间和无人机与地面控制站通信，但引入了显著的安全挑战。MAVLink协议是无人机系统中最常用的通信协议，它提供消
SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables. Prior to 4.30, the S3 API gateway and the Iceberg REST catalog gateway const...
CVE-2026-54917
SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables. Prior to 4.30, the
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances XML-RPC server (glances -s) introduced a configurable CORS origin list in version 4....
CVE-2026-46608
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances XML-RPC server (glances -s)
Outline is a service that allows for collaborative documentation. Prior to 1.8.0, the AuthenticationHelper.canAccess function uses ctx.originalUrl to verify if an API key or OAu...
CVE-2026-54573
Outline is a service that allows for collaborative documentation. Prior to 1.8.0, the AuthenticationHelper.canAccess fun
Customer Broken Access Control in UPI QR Code Payment Gateway for WooCommerce <= 1.6.2 versions.
CVE-2026-56023
Customer Broken Access Control in UPI QR Code Payment Gateway for WooCommerce <= 1.6.2 versions.
In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() reads le16_to_cpu(rom_desc->Size...
CVE-2026-53196
In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_
In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to shrink In MPTCP connection, the `window` field in the TCP header refers to ...
CVE-2026-53183
In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to shrink In MPTCP co
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, Lute's HTML sanitizer does not remove <iframe> elements. Combined with the SiYuan Electron client'...
CVE-2026-54759
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, Lute's HTML sanitizer does not remove el
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, renderPackageREADME in kernel/bazaar/readme.go renders a Bazaar package README from Markdown to HT...
CVE-2026-54070
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, renderPackageREADME in kernel/bazaar/read
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan Note's kernel HTTP server unconditionally trusts all chrome-extension:// origins, granting ...
CVE-2026-54069
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan Note's kernel HTTP server uncondit
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the /api/icon/getDynamicIcon endpoint is explicitly excluded from authentication in SiYuan's kerne...
CVE-2026-54068
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the /api/icon/getDynamicIcon endpoint is
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 ("Path Traversal via Double URL Encoding") sanitized the /export/ rou...
CVE-2026-54066
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 ("Path Trave
Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access
CVE-2026-20245
New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245
Compatibility Test Suite (CTS)
Android 兼容性测试套件 (CTS) 是 Google 提供的一套自动化测试工具，用于验证 Android 设备是否满足平台兼容性要求。CTS 包含数万个测试用例，覆盖 API 行为、系统权限、多媒体编码、无线协议等多个方面。通过 C
Compatibility Definition Document (CDD)
本输入为 Android 兼容性定义文档（CDD），并非安全公告。CDD 详细描述了 Android 设备必须满足的兼容性要求，以确保应用生态的一致性。文档可能涉及硬件、软件、API 规范等内容，但未包含任何特定漏洞信息或 CVE 记录。该
Tools, build, and related reference
该输入为 Android 安全公告的参考页面链接，标题为 'Tools, build, and related reference'，内容为空，未提供任何漏洞详情。页面仅包含工具、构建及相关参考信息，并非安全公告。因此，没有可总结的漏洞信息