Exploring Side-Channel Protections in Hardware Implementations of PQC ML-KEM Verification
本文针对后量子密码标准ML-KEM（即Kyber）在硬件实现中的侧信道防护问题展开研究，重点关注其解密过程中的Fujisaki-Okamoto（FO）验证步骤。该步骤对功耗和电磁分析特别敏感。作者选取了三种典型的FPGA实现方案：未保护、基
2026-07-02 归档
今日共收录 1714 条安全情报，包含 914 个 CVE，384 篇安全通告，以及 113 篇研究论文。
← 返回归档列表Authentication in Quantum Networks
本文是一篇关于量子网络中认证问题的综述论文。作者从量子通信的角度，系统梳理了认证这一密码学任务的三个主要类型：经典消息认证、量子消息认证和实体认证，并涵盖了近期基于硬件的认证方法。对于每种类型，论文介绍并比较了代表性协议的安全假设、设置要求
A Multi-task Mixture of Experts Framework for Malware Classification, Packing Detection, and Family Attribution
恶意软件分类因二进制文件的异构性、加壳技术的存在以及恶意软件家族的多样化分布而极具挑战性。传统的单任务检测模型难以泛化到各类数据，尤其在面对混淆和稀有样本时性能下降严重。本文提出了一种基于混合专家（Mixture of Experts, M
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...
CVE-2026-57277
CVE-2026-57277 是一个缓冲区溢出漏洞，存在于 GeoVision 系列软件集成的 GeoWebPlayer 插件中（别名 Web Plugin 或 WS Player）。GeoWebPlayer 作为一个附加组件，随 GV-V
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...
CVE-2026-57276
GeoVision 软件（如 GV-VMS、GV-Cloud 等）中的 GeoWebPlayer（也称为 Web Plugin 或 WS Player）插件存在缓冲区溢出漏洞。该插件会创建一个 WebSocket 服务器，扩展软件 Web
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...
CVE-2026-57268
GeoWebPlayer（也称为GV-VMS文档中的“Web Plugin”和VMS-Cloud的“WS Player”）是GeoVision系列软件（如GV-VMS、GV-Cloud等）的一个附加组件，用于创建WebSocket服务器以扩
Craft CMS is a content management system (CMS). In versions 5.9.0 and above prior to 5.10.0, control panel users with the ability to edit entries can execute unsandboxed Twig co...
CVE-2026-55794
Craft CMS 5.9.0 至 5.10.0 之前版本中存在一个认证后的远程代码执行漏洞。该漏洞位于控制面板的用户编辑条目功能中。当用户保存条目时，系统会通过 renderObjectTemplate() 函数将用于签名重定向 URL
Craft CMS is a content management system (CMS). In versions starting from 4.0.0-RC1 and prior to 4.18.0, and 5.0.0-RC1 and above, prior to 5.10.0, the dataUrl() Twig function is...
CVE-2026-55792
Craft CMS 存在一个高危权限漏洞，影响版本 4.0.0-RC1 至 4.18.0 之前以及 5.0.0-RC1 至 5.10.0 之前。漏洞源于 dataUrl() Twig 函数被错误地加入 Twig 沙箱白名单，导致拥有 uti
Probe Choice Changes Canary-Memorization Verdicts: Three Post-Hoc Disagreement Case Studies in a Text-Dominant LoRA-Tuned Autoregressive Testbed
该论文研究了对大语言模型（LLM）进行记忆探测时，不同探测选择可能导致结论分歧的问题。作者在一个固定的前缀窗口均值负对数似然（NLL）探测探针（窗口大小K=20）上，对Qwen2.5-VL-7B模型的金丝雀测试床进行了审计，并报告了三个事后
Craft CMS is a content management system (CMS). Versions 4.0.0-RC1 and above, prior to 4.18.0 and 5.0.0-RC1, and above, prior to 5.10.0, are vulnerable to Server-Side Request Fo...
CVE-2026-55791
Craft CMS is a content management system (CMS). Versions 4.0.0-RC1 and above, prior to 4.18.0 and 5.0.0-RC1, and above,
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 and above prior to 5.9.21, the EntriesController::actionMoveToSection() endpoint gates the destination sect...
CVE-2026-50280
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 and above prior to 5.9.21, the EntriesController::
Craft CMS is a content management system (CMS). IN versions 5.0.0-RC1 and above prior to 5.9.21, theEntriesController::actionSaveEntry() performs entry-edit permission checks be...
CVE-2026-50279
Craft CMS is a content management system (CMS). IN versions 5.0.0-RC1 and above prior to 5.9.21, theEntriesController::a
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript...
CVE-2026-55790
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an a
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the d...
CVE-2026-50284
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theA
Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionRe...
CVE-2026-50283
Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain
Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This...
CVE-2026-14440
Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automati
A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. The service accepts a sequence of post-clone file-manipulat...
CVE-2026-14439
A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. Th
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev...
CVE-2026-14432
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside
Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev...
CVE-2026-14431
Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside
Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s...
CVE-2026-14430
Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code insid