Proof in a Bottle: Long-Lived Verifiable Secret Sharing via Pre-Quantum Commitment and Immutable Ledger Binding
本文提出了一种名为“Proof in a Bottle (PiB)”的新型可验证秘密共享方案，旨在解决传统VSS面对量子计算攻击的脆弱性。传统VSS依赖于承诺和绑定，但Shor算法可破解离散对数问题，从而破坏绑定。PiB的关键洞察是：绑定仅
2026-07-17 归档
今日共收录 1302 条安全情报，包含 372 个 CVE，507 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Watermark Forensics for Generative Models: An Information-Theoretic Perspective
本文从信息论角度研究生成模型（如大语言模型）输出水印的取证能力。传统水印仅用于检测文本是否为机器生成，但本文提出一个更丰富的取证阶梯：归因（将输出追溯到特定用户）、提取（从水印中恢复隐藏载荷）和定位（找出经过编辑后幸存的水印部分）。作者引入
Designing a GDPR-Compliant Security Architecture for Remote Elderly Care Systems: A Privacy-by-Design Approach
本文针对基于IoMT的远程老年人护理系统中敏感健康数据持续流出的安全问题，提出了一种名为Secure Edge Gateway (SEG) 的集成安全架构。研究背景指出，现有安全架构未能同时解决三个相互依赖的挑战：GDPR合规的边缘层假名化
Explaining Intrusion Alert Decisions of Deep Learning-based Network Intrusion Detection Systems for Security Analysts
本文提出 EXP-SEC 框架，旨在为基于深度学习的网络入侵检测系统（DL-based NIDS）生成的告警提供可解释性，使安全运营中心（SOC）的分析师能够理解告警背后的决策依据。研究背景是：现有DL-based NIDS虽然检测精度高，
AutoTrace: From Patches to Triggers via Agentic Interprocedural Exploration
本文提出 AutoTrace，一个基于智能体（agentic）的流水线，用于从漏洞修复补丁中定位触发器（trigger），即导致脆弱程序状态转变为具体不安全操作的语句。该问题比二元漏洞检测更难，因为答案需要跨过程（interprocedur
OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust callers to execute actions beyond their intended authorizat...
CVE-2026-62228
OpenClaw 在 2026.6.5 之前版本中存在授权绕过漏洞，位于节点执行批准功能中。由于网关和节点环境配置的不一致，低信任调用者可以通过利用不同的环境设置，执行超出其授权范围的持久化或操作命令。攻击者能够绕过预期授权，实现任意代码执
Argo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencing
CVE-2026-54526
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior t
Activepieces: Arbitrary file write in git-sync via path traversal and symlinks
CVE-2026-53535
Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-conf
Activepieces: Cross-tenant file download via missing JWT audience check on step-files signed URL
CVE-2026-53536
Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /v1/step-files/signed download endp
Frogman: Multiple read-tier tools expose admin-grade data and arbitrary GraphQL execution
CVE-2026-46515
Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.3, PERM_READ access was sufficient to call
Frogman: Dialplan template parameters interpolated into extensions_custom.conf without escaping
CVE-2026-46512
Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_dialplan_apply accepted template para
Frogman: API tokens stored in plaintext
CVE-2026-46513
Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by T
Frogman: Plaintext passwords and secrets persisted to audit log
CVE-2026-46514
Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_reset_password in Tools/ResetPassword
BigBlueButton API checksum bypass via presentationUploadExternalUrl
CVE-2026-46353
BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web checksum validation could be bypassed when a
BigBlueButton: Presentation URL Security Hardening
CVE-2026-46404
BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, the presentation URL validation did not properly res
BigBlueButton: Insecure Randomness allows to guess user's conference session token and impersonate them
CVE-2026-46351
BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web generated conference sessionToken values wit
Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string
CVE-2026-46377
Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.1
Dasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literal
CVE-2026-46378
Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.1
dbt-mcp: Tool Arguments Including SQL Queries and Credentials Logged in Plaintext Without Redaction When File Logging Is Enabled
CVE-2026-44969
dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DbtMCP.call_tool() in src/dbt_mcp/
dbt-mcp: All MCP Tool Arguments Including Raw SQL and --vars Credentials Transmitted to dbt Labs Telemetry by Default Without Redaction
CVE-2026-44970
dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DefaultUsageTracker.emit_tool_call