Occluding the Solution Space: Planner-Agnostic Adversarial Attacks on Tolerance-Aware Manipulation
该论文针对机器人操作中的运动规划对抗攻击问题展开研究。现有攻击方法通常依赖精确位姿目标，并且需要持续查询规划器（planner-in-the-loop），这在实际中受限。为此，作者提出了一种与规划器无关（planner-agnostic）的
2026-07-08 归档
今日共收录 1050 条安全情报，包含 282 个 CVE，378 篇安全通告，以及 103 篇研究论文。
← 返回归档列表A Failure-Mode Benchmark for Polymorphic Sybil Poisoning in RAG
该论文发布了一个针对检索增强生成（RAG）系统中协调性检索投毒攻击的基准测试与失败模式感知评估框架。作者将阅读器输出划分为四个互斥类别（金标准、劫持、弃权、漂移），并引入了实例级别的配对清洁到投毒转换矩阵和强制暴露协议，以隔离阅读器端冲突解
Assessing the Operational Impact of Poisoning Attacks over Augmented 3D Point Cloud Public Datasets for Connected and Autonomous Vehicles
该论文研究了针对增强型3D点云公开数据集的投毒攻击在互联自动驾驶车辆（CAV）背景下的实际影响。投毒攻击通过向训练数据中注入恶意样本，可导致模型对感知对象的误分类或植入后门，从而在特定条件下被触发。尽管数据增强技术被认为能降低投毒攻击的成功
LibFHE: A Numba-Based CUDA-Python Library for Non-RNS CKKS-BGV Fully Homomorphic Encryption on GPUs
全同态加密（FHE）允许在密文上直接执行任意计算，是隐私保护计算的关键技术。自第四代 FHE 框架 CKKS 提出以来已逾十年，但尚未出现第五代替代方案；近年来大量研究利用 GPU 加速同态计算以提升效率。本文提出 LibFHE，一个基于
Complets: Universal Compartmentalisation and Programming Model For Arm Permission Overlay Extension 2
本文针对 Arm Permission Overlay Extension 2 (POE2) 进行了深入分析，并提出了一种通用的编程模型。POE2 是一种基于内存保护键的进程内隔离机制，它扩展了 POE1，引入了时间索引（temporal
An Exploratory Study of Malicious Link Posting on Social Media Applications
本研究针对社交媒体应用中链接分享功能的安全漏洞展开探索性分析。随着社交媒体平台成为全球主流通信工具，用户频繁通过链接分享进行内容交互，但攻击者常利用此功能发布恶意URL，诱导用户点击以实施钓鱼、恶意软件传播等攻击。研究选取了Google P
Lower Bounds for PIR with Preprocessing from Blackbox Cryptography
本文研究带预处理的单服务器私有信息检索（PIR）的极限。传统单服务器PIR在查询时需要线性数量的公钥操作，而近期工作利用预处理实现了亚线性查询计算。本文证明：对于任何黑盒使用密码学（如随机预言机、虚拟黑盒混淆）的带预处理单服务器PIR，若客
Security Analysis of RIS-Assisted Physical-Layer Authentication Over Multipath Channels
该论文针对可重构智能表面（RIS）辅助的物理层认证系统进行了安全分析。在物理层认证中，验证者（Bob）通过信道特征来确认用户身份。本文假设Bob控制一个RIS，合法发射机（Alice）配备单天线，而攻击者（Trudy）拥有多根天线，并使用预
Reproducible Validation of Voucher-Based L2 Interoperability: Diagnosing an ERC-4337 Compatibility Issue in an EIL SDK Implementation
本文针对以太坊Layer-2（L2）生态系统中的跨rollup互操作性问题展开研究。L2方案虽然提升了可扩展性，但也带来了用户、流动性、燃料费用和执行环境的碎片化。以太坊互操作层（EIL）提出了一种基于凭证的架构，允许用户在源链上创建凭证请
Withdrawability in Fiat-Shamir with aborts constructions
本文研究了Fiat-Shamir with aborts（带中止的Fiat-Shamir）构造中的可撤销签名问题。可撤销签名允许签名者在必要时撤销已生成的签名，这一特性在密钥泄露或权限变更等场景中具有重要应用。作者将Liu、Baek和Sus
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ens...
CVE-2026-59997
CVE-2026-59997 是 OpenSSH 中 internal-sftp 组件的一个逻辑漏洞。在 OpenSSH 10.4 之前的版本中，sshd 的 internal-sftp 子进程仅解析和处理前 9 个命令行参数，而忽略后续参
Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticat...
CVE-2026-59704
Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metada
Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `POST...
CVE-2026-55078
Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and pr
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `PUT /api/v2/users/{user}/passwo...
CVE-2026-55077
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7,
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, Coder's OIDC callback checked `email...
CVE-2026-55076
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7,
An issue in Oneblog V2.3.9 allows a remote attacker to obtain sensitive information via the RestApiController.java, JsApiTicketComponent.java, and the GetAccessTokenComponent.ja...
CVE-2026-51937
An issue in Oneblog V2.3.9 allows a remote attacker to obtain sensitive information via the RestApiController.java, JsAp
An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TT_Get_Var_De...
CVE-2026-50811
An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736
A NULL pointer dereference in smooth_parse_stream_index() in src/media_tools/mpd.c in GPAC master HEAD before commit b35c61f104b85fbb16520ac2838d5d2ef70845b5 allows attackers to...
CVE-2026-50810
A NULL pointer dereference in smooth_parse_stream_index() in src/media_tools/mpd.c in GPAC master HEAD before commit b35
Fire-Boltt Smartwatch FB BGS001 Firmware: MOY-JS14-2.0.4 is vulnerable to Improper Authentication, The device accepts GATT Write Request commands without sufficient authenticati...
CVE-2026-37271
Fire-Boltt Smartwatch FB BGS001 Firmware: MOY-JS14-2.0.4 is vulnerable to Improper Authentication, The device accepts GA
Trueview Security camera T18161- AF v4.9.60.0 contains an authentication bypass vulnerability caused by improper password validation and the presence of hard-coded credentials i...
CVE-2026-37270
Trueview Security camera T18161- AF v4.9.60.0 contains an authentication bypass vulnerability caused by improper passwor