Alert for CVE-2022-21500
CVE-2022-21500
Alert for CVE-2022-21500
2026-08-14 归档
今日共收录 1589 条安全情报，包含 784 个 CVE，406 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Alert for CVE-2021-44228
CVE-2021-44228
Alert for CVE-2021-44228
Linux 内核提权 CVE-2026-31431(copy-fail)
CVE-2026-31431
Linux 内核提权 CVE-2026-31431(copy-fail)
Alert for CVE-2026-35273
CVE-2026-35273
Alert for CVE-2026-35273
CVE-2026-0292 Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows (Severity: LOW)
CVE-2026-0292
CVE-2026-0292 Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows (Severity: LOW)
CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)
CVE-2026-0295
CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)
CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows (Severity: MEDIUM)
CVE-2026-0293
CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows (Severity: MEDIUM)
CVE-2026-0291 Prisma Access Agent: Authenticated Limited File Deletion on Linux (Severity: LOW)
CVE-2026-0291
CVE-2026-0291 Prisma Access Agent: Authenticated Limited File Deletion on Linux (Severity: LOW)
CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)
CVE-2026-0296
CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)
CVE-2026-0299
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)
CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation (Severity: MEDIUM)
CVE-2026-0294
CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation (Severity: MEDIUM)
CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)
CVE-2026-0297
CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)
CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering (Severity: LOW)
CVE-2026-0301
CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering (Severity: LOW)
CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)
CVE-2026-0298
CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MED
Slow and Steady: Preventing MEV with Verifiable Delays
本文提出一种针对分布式账本中最大可提取价值（MEV）机会的防御机制。核心思想是在生成交易时强制执行可验证的延迟（verifiable delay），使得区块创建者无法在发现 MEV 机会后迅速做出反应而不破坏活性（liveness）。作者分
Understanding Backdoor Vulnerabilities in Vertical Federated Learning: The Gap Between Research and Practice
本文系统性地研究了纵向联邦学习（Vertical Federated Learning, VFL）中的后门攻击漏洞，揭示了现有研究与实践之间存在显著差距。VFL允许不同组织在不共享原始数据的情况下，基于互补特征协作训练模型。由于发起者可以隐
Association-based Privacy Attacks in Wireless Protocols: Formal Modeling and Mitigation
本文针对无线通信协议中由重放/中继技术引发的配对性隐私攻击（尤其是关联推断攻击）进行了形式化建模与缓解研究。随着社交媒体和物联网设备产生的隐私敏感数据激增，现有系统缺乏自动化、形式化的隐私风险评估手段，而无线协议中的认证重连机制常基于共享密
From Runnable to Verifiable: An Independent Reproducibility Study of LLM/Agent-Driven Vulnerability Validation Artifacts
该论文针对 LLM/agent 驱动的漏洞验证工件（如 PoC 仓库、验证管道）的可复现性与可靠性进行了一项预注册的独立审计研究。研究背景是：随着大语言模型与自动化代理被用于漏洞挖掘和验证，安全社区产生了大量自动化生成的安全工件，但工件'可
Sovereign by necessity? Frontier AI export controls, cyber security, and the limits of national AI capability
该论文探讨了前沿人工智能模型出口管制与网络安全之间的相互作用，并分析了国家AI能力的现实限制。文章指出，少数位于两个国家的企业生产了最强大的前沿AI模型，而这两个国家的政府已展现出决定哪些国家可以使用这些系统的法律权力和政治意愿。2026年
Operationalizing Cyber Threat Intelligence with GraphRAG
该论文针对网络威胁情报（CTI）报告到可部署检测规则的自动化转化问题展开研究。当前自动化方法通常仅从报告中提取最低层级的简单线索（如IP地址、域名、文件哈希）并生成阻断列表，这类检测易被攻击者快速变更规避。研究引入知识图谱检索系统 Micr