Generative Testing of Automated Speech Recognition Systems
该论文提出了一种名为GATAS的自动语音识别（ASR）系统黑盒测试方法。研究背景是，尽管基于transformer的ASR模型在关键应用中取得了高准确率，但仍容易受到对抗性攻击，尤其是在黑盒场景下，攻击需要保持感知自然性。现有方法通常直接扰
2026-07-14 归档
今日共收录 1138 条安全情报，包含 379 个 CVE，396 篇安全通告，以及 80 篇研究论文。
← 返回归档列表SFDS: Selective File Disclosure System
本文针对网络资源访问控制中长期存在的挑战，提出了基于选择性披露JSON Web令牌（SD-JWT）标准的文件共享架构SFDS。传统访问控制依赖身份与访问管理（IAM）系统，涉及用户认证、身份管理、授权服务等复杂组件，且易受漏洞、配置错误或实
A Guess and Determine Attack on the Elliptic Curve Discrete Logarithm Problem
本文延续了作者前期的研究工作，提出了一种针对椭圆曲线离散对数问题（ECDLP）的“推测与确定”（Guess and Determine）攻击方法。该方案基于拉斯维加斯（Las Vegas）算法，将求解ECDLP转化为在矩阵中寻找零子式（ze
Impact of Benign Connectivity Variations on Intrusion Detection for Encrypted OPC UA Traffic in Industrial Private 5G Networks
该论文研究了在工业专用5G网络环境下，基于机器学习的入侵检测系统（IDS）处理加密OPC UA流量时，良性连接变化对检测性能的影响。作者指出，尽管机器学习IDS在加密工业通信监控中日益普及，但其在真实专用5G操作条件下的表现尚未被充分理解。
Leveraging Interpretable Tsetlin Machine for PDF Malware Detection
本文针对PDF文件被广泛用于传播恶意软件的安全问题，提出了一种基于可解释Tsetlin Machine（TM）的恶意PDF检测框架。该框架通过静态分析从PDF文件中提取关键特征，无需执行文件即可进行检测，并利用TM的规则学习机制对良性与恶意
SafeGuard: A Lightweight Client-Server Architecture for Real-Time Endpoint Threat Detection and Response
本文提出 SafeGuard，一种轻量级的三层客户端-服务器架构，用于实时端点威胁检测与响应，特别面向资源受限的中小型组织。系统由三部分组成：基于 Flutter 并扩展 Kotlin 以获取 Android 系统访问权限的端点代理、基于
A Hybrid Quantum-Chaos Theory Approach to Image Encryption Using Reservoir Computing
该研究提出一种结合量子密码、混沌理论和储层计算的混合图像加密系统，旨在应对传统加密方法在量子计算时代面临的挑战。随着量子计算的发展，RSA、DHKE等基于大整数分解的经典密码系统易受Shor算法和Grover算法的攻击。为此，论文设计了一个
Portable Acceleration of Learning With Errors KEMs for Post-Quantum Cryptography
本文针对后量子密码（PQC）迁移中基于Learning With Errors（LWE）的密钥封装机制（KEM）计算开销大的问题，提出一种可移植的GPU加速方案。作者利用OpenMP Target offloading技术，在单一源码基础上
A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function read_file/write_file/edit_file of the file tools/fs_ops.go of the component File Tools. P...
CVE-2026-15621
A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function read_file/write_file/edit_file o
A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the function tools.webFetch of the file tools/tool_web_fetch.go. Such manipulation leads...
CVE-2026-15620
A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the function tools.webFetch of
A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the function web_fetch of the file tools/tool_web_fetch.go of the component IPv4 Handler....
CVE-2026-15619
A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the function web_fetch of the fi
A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecCommand of the file tools/tool_exec.go of the component exec S...
CVE-2026-15618
A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecComma
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via exten...
CVE-2026-58102
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails t...
CVE-2026-58101
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2
Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php sanitizes the...
CVE-2026-57856
Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() meth
Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php execut...
CVE-2026-57855
Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api
A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the file src/query/compiler/select.ts of the component Alias Pa...
CVE-2026-15607
A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the fi
A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function ArtifactManifestEntry.download in the library wandb/sdk/lib/hashutil.py of the componen...
CVE-2026-15605
A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function ArtifactManifestEntry.download
Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to register instances with attacker-controlled h...
CVE-2026-62242
Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated a
CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist checks before returnin...
CVE-2026-62240
CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one