Alert for CVE-2022-21500
CVE-2022-21500
Alert for CVE-2022-21500
2026-07-26 归档
今日共收录 1024 条安全情报，包含 289 个 CVE，422 篇安全通告，以及 50 篇研究论文。
← 返回归档列表Alert for CVE-2021-44228
CVE-2021-44228
Alert for CVE-2021-44228
Linux 内核提权 CVE-2026-31431(copy-fail)
CVE-2026-31431
Linux 内核提权 CVE-2026-31431(copy-fail)
Alert for CVE-2026-35273
CVE-2026-35273
Alert for CVE-2026-35273
【安全通告】Fastjson 远程代码执行漏洞风险通告（CVE-2026-16723）
CVE-2026-16723
【安全通告】Fastjson 远程代码执行漏洞风险通告（CVE-2026-16723）
【安全通告】Redis 远程代码执行漏洞风险通告（CVE-2026-66373）
CVE-2026-66373
【安全通告】Redis 远程代码执行漏洞风险通告（CVE-2026-66373）
Toward cryptographically verifiable authorization for autonomous AI agents: A security hypothesis, preliminary formal model, and proof-of-concept implementation
本文针对自主AI代理在执行操作、调用工具和访问受保护资源时缺乏密码学可验证授权的问题，提出了一种新的形式化模型——密码学可验证代理授权（CVA）。研究指出，现有的认证和授权机制虽然可以建立身份和委托权限，但无法提供密码学证据证明特定代理在特
Advances in STV Margin Computation
单记可转移投票（STV）是一种多赢家比例代表选举制度，在政治选举和决策中被广泛使用。选举结果的完整性至关重要，而操纵选举需要改变一定数量的选票才能改变胜选者集合。这个最小选票数称为“边际”。如果能够计算边际或一个合理的下界，就可以利用近年审
Weak Private Information Retrieval for Graph-based Storage
本文研究了基于图复制的分布式存储系统中的弱私密信息检索（G-WPIR）问题。在这类系统中，数据库（服务器）被建模为图的顶点，每个文件存储在一对服务器中，由图的边表示。客户端希望通过查询-响应协议检索所需文件，同时不向任何数据库泄露文件索引。
The Consensus Number of Untraceable Cryptocurrencies
该论文研究了不可追踪加密货币中发送方匿名性对同步（共识）的影响。发送方匿名性通过“掩蔽集”（masking set）隐藏交易发起方账户，现有设计分为两类：经典方案保留整个掩蔽集并追加空化器标记已用账户（线性不可追踪资产转移，LUAT），导致
Chained Attacks on Drone-Based Federated Learning: From Network Disruption to Device Impersonation
本文研究无人机群中基于联邦学习（FL）的边缘智能系统的安全性，提出了一种链式攻击方法，结合网络层拒绝服务（DoS）和凭据冒充。攻击者首先利用802.11去认证攻击强制合法无人机离线，然后使用窃取的凭据冒充已断线的无人机重新加入FL训练。作者
ISAC-Assisted Channel Knowledge Map Generation for Physical Layer Authentication
该论文提出了一种利用集成感知与通信（ISAC）技术辅助生成信道知识地图（CKM）的方法，并将其应用于物理层认证（PLA）。ISAC能够通过通信信号获取环境信息，论文利用这一能力重建多个接收机周围物体的布局。然后对重建的环境应用射线追踪，推断
Know Your Agent: Reconnaissance-Driven Pentesting of AI Agents
本文提出了一种针对AI智能体的侦察驱动渗透测试方法。传统渗透测试在每一步都使用侦察来发现隐藏的弱点、构建更强的攻击并推进目标，而作者认为AI智能体需要同样的处理。作者通过建模智能体侦察过程，识别其试图提取的知识资产：包括它们是什么、如何使用
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices ad_sigma_delta_clear_pending_eve...
CVE-2026-64502
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix clear_pending_event f
In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid calling pci_irq_vector() from hardirq context ntb_epf_vec_isr() calls pci_irq_vector() in h...
CVE-2026-64430
In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid calling pci_irq_vector() from hardi
In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use raw_spinlock_t in the irq startup path sprd_eic_irq_unmask() enables the GPIO IRQ and t...
CVE-2026-64429
In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use raw_spinlock_t in the irq start
In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use raw_spinlock_t in the irq startup path sch_irq_unmask() enables the GPIO IRQ and then update...
CVE-2026-64428
In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use raw_spinlock_t in the irq startup pa
In the Linux kernel, the following vulnerability has been resolved: mm: do file ownership checks with the proper mount idmap Ever since idmapped mounts were introduced, inode ...
CVE-2026-64294
In the Linux kernel, the following vulnerability has been resolved: mm: do file ownership checks with the proper mount
libssh2 Heap Buffer Overflow via ETM Cipher Negotiation
CVE-2026-66035
libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that a
libssh2 Heap Out-of-Bounds Read via publickey subsystem
CVE-2026-66034
libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious S