AI in Cyberpsychology: A systematic literature review of Cybersecurity enhancement by using AI for analyzing psychology of Victims, Attackers, and Defenders

本文是一篇系统文献综述（SLR），旨在探讨人工智能（AI）在网络心理学（Cyberpsychology）领域中的应用，以增强网络安全。研究背景是：网络安全需要保护系统、网络和数据免受数字攻击，而网络心理学则利用心理学原理提升安全应用。自20

历史摘要 · 未重新核验 · arXiv cs.CR

ARMOR-IMC: Adaptive Resource Mapping for Operational Robustness via Secure In-Memory Computing

该论文针对传统架构中巨大的数据搬运开销问题，提出了一种基于电阻式存储计算（IMC）的深度神经网络（DNN）加速器安全加固方法。传统IMC加速器使用自旋轨道矩磁隧道结（SOT-MTJ）等新兴器件绕过“存储墙”并降低泄漏功耗，但面临双重硬件威胁

历史摘要 · 未重新核验 · arXiv cs.CR

Towards quantum machine learning for assessing the resilience of post-quantum cryptography

该论文探索了利用量子机器学习（尤其是量子生成对抗网络QGAN）来评估后量子密码协议鲁棒性的可能性。尽管当前量子计算机在规模和精度上有限，但它们仍可能被用于发现后量子密码协议中的漏洞和弱点。作者提出了一个示例应用：使用QGAN架构将基于哈希的

历史摘要 · 未重新核验 · arXiv cs.CR

Multivariate Cryptography-Based Anonymous Certificate Scheme

随着量子计算技术的不断成熟，现有的公钥密码体系面临严峻威胁。美国国家标准与技术研究院（NIST）已规划后量子密码（PQC）迁移时间表，建议在2030年前逐步淘汰某些椭圆曲线密码（ECC）。同时，隐私敏感场景（如车联网通信）要求使用匿名证书以

历史摘要 · 未重新核验 · arXiv cs.CR

To Play or Not to Play: Insights and Lessons Learned from 20 Years of CTFs with ENOFLAG

该论文回顾了ENOFLAG团队20年来参与和举办CTF（Capture The Flag）安全竞赛的经验与教训。CTF竞赛自2006年DIMVA会议上的CIPHER II现场赛以来，已成为网络安全学习的重要形式。ENOFLAG团队自那时成立

历史摘要 · 未重新核验 · arXiv cs.CR

Open-Source Intelligence and Music Information Retrieval for Geographic Attribution of Musical Affect and the Ecological Limits of Population Inference

该论文研究地理区域与音乐情感之间的关联，并检验流行直觉——即一个地区的音乐是否反映其居民的性情（如忧郁旋律对应忧郁人群）。作者使用埃森民歌集（Essen Folksong Collection），包含数千首标注的民间旋律，从中提取2393首

历史摘要 · 未重新核验 · arXiv cs.CR

PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables. Consequently, multiple Capture ob...

CVE-2026-63175

PlaywrightCapture 是一款用于捕获浏览器操作的工具，其核心功能是管理多个 Capture 对象来执行浏览器自动化任务。该漏洞源于开发者将捕获特定的配置和运行时数据（如 HTTP 头、cookies、浏览器存储、HTTP 凭证

历史摘要 · 未重新核验 · NVD

Wekan is open source kanban built with Meteor. Prior to 9.37, Wekan DDP update allow rules in server/permissions/cards.js, server/permissions/lists.js, and server/permissions/sw...

CVE-2026-55234

Wekan 是一个基于 Meteor 的开源看板应用。在 9.37 版本之前，其 DDP（分布式数据协议）更新规则存在缺陷。具体而言，`server/permissions/cards.js`、`server/permissions/lis

历史摘要 · 未重新核验 · NVD

Wekan is open source kanban built with Meteor. Prior to 9.35, the Wekan cloneBoard Meteor method in models/import.js uses caller-supplied sourceBoardId to build a board export t...

CVE-2026-53447

Wekan 是一个基于 Meteor 构建的开源看板工具。在 9.35 版本之前，models/import.js 中的 cloneBoard Meteor 方法使用调用者提供的 sourceBoardId 参数来通过 models/exp

历史摘要 · 未重新核验 · NVD

Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan webhook integration URLs in models/integrations.js are stored from user input and later fetched by server/not...

CVE-2026-53446

Wekan 是一个基于 Meteor 的开源看板应用。在版本 9.32 之前，Wekan 在处理 webhook 集成 URL 时存在安全漏洞。具体来说，在 models/integrations.js 中，webhook 集成 URL 直

历史摘要 · 未重新核验 · NVD

Wekan is open source kanban built with Meteor. Prior to 9.32, the Wekan copyBoard Meteor DDP method in server/publications/boards.js copies a board by caller-supplied board ID w...

CVE-2026-53445

CVE-2026-53445 是开源看板应用 Wekan 中的一个授权绕过漏洞，影响版本 9.32 之前。Wekan 基于 Meteor 框架构建，其 copyBoard 方法（位于 server/publications/boards.j

历史摘要 · 未重新核验 · NVD

Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan OIDC-related Meteor methods in packages/wekan-oidc/oidc_server.js, server/models/org.js, and server/models/te...

CVE-2026-53444

Wekan 是一款基于 Meteor 构建的开源看板应用。在 9.32 版本之前，其 OIDC（OpenID Connect）相关的 Meteor 方法在 packages/wekan-oidc/oidc_server.js、server/

历史摘要 · 未重新核验 · NVD

Wekan is open source kanban built with Meteor. Prior to 9.31, Wekan allows a logged-in board member to insert an attachment document through the /attachments/insert DDP method w...

CVE-2026-52890

Wekan is open source kanban built with Meteor. Prior to 9.31, Wekan allows a logged-in board member to insert an attachm

历史摘要 · 未重新核验 · NVD

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a stored Cross-Site Scripting vulnerability in the YouTubeAPI plugin. The plugin renders the snippe...

CVE-2026-50183

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a stored Cross-Site Scripting vulnerabilit

历史摘要 · 未重新核验 · NVD

WWBN AVideo is an open source video platform. Versions prior to 29.0 contain an unauthenticated Reflected XSS vulnerability through AVideo YouTubeAPI Gallery Pagination. The $_G...

CVE-2026-50182

WWBN AVideo is an open source video platform. Versions prior to 29.0 contain an unauthenticated Reflected XSS vulnerabil

历史摘要 · 未重新核验 · NVD

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a Stored XSS vulnerability through the autoEvalCodeOnHTML parameter in the MessageSQLite WebSocket ...

CVE-2026-49279

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a Stored XSS vulnerability through the aut

历史摘要 · 未重新核验 · NVD

AdonisJS is a TypeScript-first web framework. From 10.1.3 until 10.1.5 and 11.0.3, AdonisJS @adonisjs/bodyparser incompletely fixed CVE-2026-25754 because nested multipart field...

CVE-2026-48795

AdonisJS is a TypeScript-first web framework. From 10.1.3 until 10.1.5 and 11.0.3, AdonisJS @adonisjs/bodyparser incompl

历史摘要 · 未重新核验 · NVD

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.17.6, GuiServer::WndHookRegisterSlave in Sandboxie/core/svc/GuiServer.cpp stores attack...

CVE-2026-45313

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.17.6, GuiServer::WndHookRegist

历史摘要 · 未重新核验 · NVD

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py.

CVE-2026-38974

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py.

历史摘要 · 未重新核验 · NVD

A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVE-2026-38755

A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Ser

历史摘要 · 未重新核验 · NVD