Detection, Attribution, Narration: An End-to-End Pipeline for Explainable Money Mule Identification
该论文提出了一种端到端的自动化洗钱账户检测管道，旨在解决传统规则系统在金融欺诈检测中的局限性。管道分为三个阶段：第一阶段，利用LightGBM分类器，基于280个工程特征（包括交易模式、账户人口统计、网络拓扑和时序行为）进行客户级检测；第二
2026-07-23 归档
今日共收录 1422 条安全情报，包含 546 个 CVE，469 篇安全通告，以及 113 篇研究论文。
← 返回归档列表ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks
论文《ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks》研究了针对预训练机器学习模型（PTM）
SlotGuard: Stop Oversharing Private Local Context in LLM Agent Transcri
大型语言模型（LLM）智能体在交互过程中，会将工具输出、Shell日志、文件读取等观测结果附加到发送给提供商的转录中，导致私密信息（如路径、邮箱）和凭证（如API密钥）泄露。现有的占位符修订方法存在缺陷：可能遗漏嵌入式或跨轮次引用、过度修订
Small, Free, and Effective: Orchestrating Open-Weight Small Language Models to Outperform Single LLM for Malware Analysis
该论文探讨了在恶意软件分析任务中，能否通过编排多个小型语言模型（SLMs）来达到甚至超越单个大型语言模型（LLM）的性能。恶意软件分析需要快速理解涵盖文件系统、网络和进程行为等复杂引爆报告。虽然大型语言模型在技术性解释方面表现出色，但闭源模
n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
## Impact The n8n Snowflake node's Execute Query operation interpolated expression values directly into the SQL string,
n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected PostgreSQL Instances
## Impact The Postgres Trigger node interpolated user-supplied identifier parameters (channel, function, and trigger na
n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner
## Impact n8n's JavaScript task runner shared one module cache across all users' Code-node executions, so a user able t
JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
JupyterLab 4.5+ allows notebook settings to be shared and applied through an `overrides.json` file using the `Import` bu
JupyterLab: PyPI extension blocklist package-name canonicalization bypass
JupyterLab's PyPI extension manager enforces `blocked_extensions_uris` by comparing the requested install name to blockl
JupyterLab PluginManager lock-rule enforcement bypass
JupyterLab's plugin manager exposes administrator controls intended to prevent users from enabling or disabling selected
JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)
The extension allowlist/blocklist check inside `PyPIExtensionManager.install()` was not enforced due to a missing await.
n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base Directory
## Impact The component `@n8n/computer-use` file-search tool confined searches to a configured base directory. A crafte
n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service
## Impact The Edit Fields (Set) node assigned output fields through a dot-notation path setter without restricting the
n8n: Edit Image Node Format Injection Allows Arbitrary File Write
## Impact The n8n Edit Image node passed its output format to the underlying image library without validation, so a cra
n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON
## Impact n8n's credential-access checks validated only a node's top-level credentials, not credentials referenced insi
n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`
## Impact An authenticated member with edit access to a shared workflow could reference another user's credential in an
n8n: Expression sandbox escape via arrow-function bodies enabling command execution
## Impact An authenticated user with permission to create or modify workflows could abuse crafted expressions using arr
n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion
## Impact The n8n Send Email node did not enforce that its message fields were strings, so a crafted untrusted non-stri
n8n: SSRF Protection Bypass via MCP Client Node
## Impact On an n8n instance with SSRF protection enabled, the MCP Client node sent requests to a user-supplied endpoin
n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction
## Impact Authenticated n8n users with workflow create/execute rights could use the Git node's fetch, pull, or push-tag