.NET Denial of Service Vulnerability

CVE-2026-57108

Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny servi

历史摘要 · 未重新核验 · Microsoft MSRC

Visual Studio Code Security Feature Bypass Vulnerability

CVE-2026-57102

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass

历史摘要 · 未重新核验 · Microsoft MSRC

Visual Studio Code Security Feature Bypass Vulnerability

CVE-2026-57101

Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an una

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

CVE-2026-57096

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-57093

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

历史摘要 · 未重新核验 · Microsoft MSRC

Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability

CVE-2026-57088

Improper access control in Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally

历史摘要 · 未重新核验 · Microsoft MSRC

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

CVE-2026-57087

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a

历史摘要 · 未重新核验 · Microsoft MSRC

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

CVE-2026-57092

Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

MusicMark: A Robust Generative Watermarking Framework for Music Generation

本文提出 MusicMark，据我们所知是首个针对音乐生成的生成式水印框架。随着 AI 音乐生成技术及商业平台的快速发展，对音乐作品进行可靠的来源追踪和归属标记的需求日益迫切。然而，现有的音频水印研究主要针对语音，直接应用于音乐时面临诸多挑

历史摘要 · 未重新核验 · arXiv cs.CR

Watermark Forensics for Generative Models: An Information-Theoretic Perspective

该论文从信息论角度系统研究了生成模型水印的取证能力，提出了一种统一的框架来分析水印在检测、归属、定位和提取四个层次上的理论极限。作者引入“信息轮廓”ν(t)=I(S;X_t|X_{<t})，量化每个令牌（token）揭示秘密S（如用户身份或

历史摘要 · 未重新核验 · arXiv cs.CR

Explaining Intrusion Alert Decisions of Deep Learning-based Network Intrusion Detection Systems for Security Analysts

本文提出 EXP-SEC 框架，旨在为基于深度学习的网络入侵检测系统（DL-based NIDS）生成的告警提供可解释性，使安全运营中心（SOC）的分析师能够理解告警背后的决策原因。框架包含三个核心模块：(1) 取证模块，隔离导致告警的可疑

历史摘要 · 未重新核验 · arXiv cs.CR

FlowArk: Boosting Agentic Data-flow Analysis for Android Apps via Context-Aware Knowledge Reuse

数据流分析是安卓应用隐私和安全审计的基础。近期基于编码智能体的方法能够通过搜索、阅读和推理仓库代码来执行复杂的源到汇数据流分析任务。然而，当这些任务以批处理方式执行时，当前智能体分析设置会产生大量重复分析成本。分配给不同污点源的智能体实例可

历史摘要 · 未重新核验 · arXiv cs.CR

SoK: Federated Learning for Intrusion Detection in Vehicular Networks

现代车辆网络面临日益扩大的攻击面，涵盖内部电子控制单元（ECU）和外部车联网（V2X）通信。联邦学习（FL）作为一种去中心化范式，被引入用于在不牺牲数据隐私的前提下部署入侵检测系统（IDS）。然而，现有的车辆FL-IDS研究存在方法碎片化和

历史摘要 · 未重新核验 · arXiv cs.CR

tanstack db Alias Path select.ts select prototype pollution

CVE-2026-15607

A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the fi

历史摘要 · 未重新核验 · OSV.dev

Cockpit CMS Path Traversal via Bucket Name in Bucket File Storage API

CVE-2026-57856

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() meth

历史摘要 · 未重新核验 · OSV.dev

Cockpit CMS Missing Authorization in Bucket File Storage API

CVE-2026-57855

Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api

历史摘要 · 未重新核验 · OSV.dev

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts

CVE-2026-58102

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID

历史摘要 · 未重新核验 · OSV.dev

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference

CVE-2026-58101

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2

历史摘要 · 未重新核验 · OSV.dev

Argo CD Helm Chart < 10.0.0 Missing Network Policy RCE

CVE-2026-15416 · CVE-2026-62185

Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access r

历史摘要 · 未重新核验 · OSV.dev

OpenClaw < 2026.6.6 Authentication Bypass via Git ext transport

CVE-2026-62200

OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext transport t

历史摘要 · 未重新核验 · OSV.dev