Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails
该论文揭示了一个被忽视的评估方法论缺陷：黑盒多模态护栏（guardrail）的安全指标往往被错误地归因于护栏本身，而实际上目标模型自身的对齐机制也参与了拒绝行为。研究者指出，防御管线中两个组件都能产生拒绝（护栏和模型自身对齐），但当前评估将
2026-08-13 归档
今日共收录 1881 条安全情报，包含 959 个 CVE，493 篇安全通告，以及 113 篇研究论文。
← 返回归档列表Robust Reputation-Driven Crowdsourced Federated Learning
本文关注众包联邦学习（Crowdsourced Federated Learning, CrowdFL）中的鲁棒性量化问题。CrowdFL通过众包范式允许开放、异构的参与，扩展了传统联邦学习，而声誉驱动的激励机制常被用于引导工人选择并增强可
A Combined Feature-Based Framework for Disguise and Spoofing Detection in Face Recognition Systems
本文针对人脸识别系统中两个常见但通常被分开研究的失败模式：欺骗攻击（攻击者使用授权用户的照片或视频冒充）和伪装（合法用户因配饰、胡须、光照或姿态变化导致外观与注册模板不匹配而被拒绝）。作者提出并比较了五种结合特征提取与分类的流水线，在统一框
Renaming or Tightness: Enforcing Disjunctive Information Flow Policies
本文研究分离式信息流策略的强制执行问题。分离式策略允许一个值最多依赖于两个秘密之一，而不能同时依赖于两者，例如分析师只能查阅一个客户的文件而不能同时查阅两个，或者分割的秘密只能释放其中一部分。这类策略不满足格结构，Hunt和Sands提出使
VUPER: Verified ASN.1 UPER Parser
该论文提出了 VUPER，一个用于生成经过形式化验证的 ASN.1 UPER（非对齐压缩编码规则）解析器的框架。ASN.1 是一种广泛使用的接口描述语言，而 UPER 是其中关键的编码规则之一，尤其在蜂窝网络和车联网（V2X）通信等安全关键
NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at `src/platf...
CVE-2026-50544
NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a laten
The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched...
CVE-2026-46382
CVE-2026-46382 影响 MRBS（Meeting Room Booking System）——一个基于 PHP 的会议室预订应用。该漏洞存在于 1.12.2 之前的版本中，源于系统对用户提供的 URI 缺少安全检查，导致攻击者可
PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and of stylesheet paths in _style_tag_for. to_pdf reads the...
CVE-2026-17431
PDF::WebKit 是 Perl 语言的一个库，用于将 HTML 转换为 PDF。在版本 1.2 及之前，存在操作系统命令注入漏洞。该漏洞源于 to_pdf 函数中的输出路径以及 _style_tag_for 函数中的样式表路径使用了
PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor col...
CVE-2026-16770
CVE-2026-16770 影响 Perl 的 PDF::WebKit 模块（版本 1.2 及之前）。该模块用于将 HTML 转换为 PDF，底层调用 wkhtmltopdf 工具。漏洞源于模块在解析 HTML 源时，会收集文档头部所有形
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project configuration dat...
CVE-2026-47717
FUXA 是一个基于 Web 的过程可视化（SCADA/HMI/仪表板）软件，广泛应用于工业监控和数据采集系统。在 fuxa-server 1.3.0 版本中，存在一个安全漏洞，涉及 GET /api/project 端点。该端点用于获取项
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment passes its client-supplied fil...
CVE-2026-73498
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, co
blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0.23.18 and 1.0.0-M42, blaze-server can merge HTTP/1.1 chunked-body trailer fi...
CVE-2026-73495
blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0.23.18 and 1.0.0-M42
Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Prior to 0.23.18 and 1.0.0-M42, http4s-blaze-server aggregates fragments of an incoming W...
CVE-2026-73493
Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Prior to 0.23.18 and 1.0.0-M42,
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.allowed_...
CVE-2026-73492
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only...
CVE-2026-71846
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secr
A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed cluster can exploit a vulnerability that allows them to inje...
CVE-2026-71473
A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed clu
A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry...
CVE-2026-71469
A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random b
A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buff...
CVE-2026-19003
A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setu
vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL and toggles email_function/name without checking the record's contact belongs to ...
CVE-2026-18750
vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL and toggles email_functi
The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coordinator-uploaded case artefact that has NOT been marked s...
CVE-2026-18749
The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coor