Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage
本文提出了一种新型的干净标签（clean-label）后门攻击框架，称为“良性标签、恶意设计”，通过机器遗忘（machine unlearning）机制实现休眠后门的激活。传统后门攻击在植入后立即生效，容易被防御方检测；而基于遗忘激活的后门
2026-08-01 归档
今日共收录 1220 条安全情报，包含 330 个 CVE，503 篇安全通告，以及 110 篇研究论文。
← 返回归档列表Distributed Point Functions and Function Secret Sharing
本文是一篇关于分布式点函数（DPF）与函数秘密共享（FSS）的综述性论文，由密码学领域知名学者撰写。分布式点函数是一种基础密码学原语，允许两个或多个参与方对一个秘密的权重为1的向量（等价于点函数）进行压缩的加性秘密共享。这种轻量级结构使得D
Explicit Separations for One-Query Unitary Synthesis
本文研究量子计算中的幺正合成（unitary synthesis）问题，该问题由Aaronson-Kuperberg在CCC 2007提出，核心是询问是否每个n量子比特的幺正算符U都能通过相对于某个经典预言机f=f_U的高效量子电路来计算。
Hermes: Low Tail-Latency Via Prefix Consensus
该论文提出 Hermes，一种旨在降低 BFT（拜占庭容错）协议尾延迟的新型共识协议。在基于领导者的 BFT 协议中，视图的最终化完全依赖领导者：如果领导者崩溃或响应缓慢，该视图将无法达成任何最终化；而结束视图的超时设置也面临两难：保守的超
A Structuration Approach to Theorizing Cybersecurity Practice: The STARC Model
该论文针对网络安全实践在多个层面（分析师、团队、组织、行业、监管机构）同时运行、与攻击者共同演化、以及人机混合决策日益普及的现实，指出现有网络安全理论往往局限于单一组织层面，无法解释为什么具有类似控制措施的组织在韧性上差异显著。为此，作者提
Function Privatization in the Local Model
本文研究本地模型（local model）下函数私有化发布问题，特别关注曲线数据（即定义在有限区间上的连续函数图像），如轨迹数据、一维密度曲线等自然以曲线形式存在的数据。在本地差分隐私（Local Differential Privacy,
Formalization of security
本文是 Gilles Barthe 撰写的一篇关于安全形式化的综述章节，主要探讨如何使用证明助手（proof assistants）来验证安全设计与实现。研究背景是安全关键系统需要高保证的正确性，而形式化证明能够提供严格的数学依据。核心内容
The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'headingWrapper' parameter in al...
CVE-2026-7623
CVE-2026-7623 是 WordPress 的 SureForms 插件（用于构建联系表单、支付表单及其他自定义表单）中存在的一个存储型跨站脚本（Stored XSS）漏洞。该漏洞影响所有版本直至并包括 2.8.1。漏洞源于插件对
The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.0.0. This is due to the `save_meta_boxes()` func...
CVE-2026-15414
CVE-2026-15414 是 WordPress 插件 Subscriptions for WooCommerce 中的一个权限提升漏洞，影响版本至 2.0.0（含）。漏洞根因在于 save_meta_boxes() 函数在保存会员计划
pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Bindin...
CVE-2026-54909
CVE-2026-54909 影响 pion/stun，这是一个用 Go 语言实现的 STUN（Session Traversal Utilities for NAT）协议库，广泛用于 WebRTC、ICE 等实时通信场景。该库在 3.1.
gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read an...
CVE-2026-54785
CVE-2026-54785 影响 gemini-bridge 这款轻量级 MCP（Model Context Protocol）服务器，其作用是通过官方 CLI 将 AI 代理连接到 Google 的 Gemini AI 服务。在版本 1
Decidim is a participatory democracy framework. From 0.31.1 before 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, a participant can directly load /admin/demographics/questions/edit...
CVE-2026-45086
Decidim is a participatory democracy framework. From 0.31.1 before 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, a partici
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates a resumed REFRESH request with the resuming user's ...
CVE-2026-65981
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenti
An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted request
CVE-2026-51785
An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted req
PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery (CSRF). The payment validation controller has no CSRF token. An attacker can confi...
CVE-2026-50986
PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery (CSRF). The payment valid
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a co...
CVE-2026-38713
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2
TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute a...
CVE-2026-38710
TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock in
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a co...
CVE-2026-38708
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2
SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/delete_group.php?id=1.
CVE-2025-69948
SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/delete_group.php?id=1.
SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters district_id , division_id, region_id, and ward_id.
CVE-2025-69946
SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters distr