Alert for CVE-2025-61884
CVE-2025-61884
Alert for CVE-2025-61884
2026-08-30 归档
今日共收录 849 条安全情报，包含 76 个 CVE，428 篇安全通告，以及 85 篇研究论文。
← 返回归档列表Alert for CVE-2025-61882
CVE-2025-61882
Alert for CVE-2025-61882
Alert for CVE-2024-21287
CVE-2024-21287
Alert for CVE-2024-21287
Alert for CVE-2022-21500
CVE-2022-21500
Alert for CVE-2022-21500
Alert for CVE-2021-44228
CVE-2021-44228
Alert for CVE-2021-44228
Linux 内核提权 CVE-2026-31431(copy-fail)
CVE-2026-31431
Linux 内核提权 CVE-2026-31431(copy-fail)
Alert for CVE-2026-35273
CVE-2026-35273
Alert for CVE-2026-35273
When Relationships Break: Interpreting Network Traffic Anomalies via Dependency Violations
该论文针对网络安全监控中基于机器学习的方法存在的可解释性不足问题展开研究。现有方法要么依赖忽略特征间依赖关系的特征归因技术，要么依赖需要大量领域知识或计算资源的因果建模，难以回答“为何发出警报”这一核心问题。为此，作者提出 XION 方法，
From Security Events to Conflict States: A Three-layer Cyber Defense Scenario Model for Enhanced Cyber Situational Awareness
本文提出了一种面向任务关键环境的任务导向型网络防御框架，旨在提升网络态势感知（CSA）与决策支持能力。研究背景是在任务关键环境中，防御者需要在信息不完整且含噪声的观测条件下，持续评估不断变化的安全态势，同时保障关键任务的连续性和完整性。核心
A Hybrid Post-Quantum Encryption Architecture with Self-Hosted Key Management for SME Cloud Data Protection
该论文提出了一种面向中小型企业（SME）云数据保护的后量子加密混合架构，名为 Quantum Cloud Guard (QCG)。研究背景是“先收割后解密”（harvest-now-decrypt-later）的威胁：攻击者现在可以收集加密
Improving the Robustness of the XRP Ledger Network via Edge Augmentation Strategies
本文针对 XRP Ledger 网络的共识机制鲁棒性问题展开研究。XRP Ledger 允许参与者选择一组受信任的节点（即唯一节点列表 UNL）进行通信，并以高阈值（如 80%）达成共识，决定下一账本状态应包含的交易。然而，该共识协议要求各
AI Slop and Hallucinations in Vulnerability Assessment: A Survey on Reasoning Failures and Trustworthy Mitigation
本文是一篇针对大语言模型（LLM）在漏洞评估中产生“AI 垃圾内容”（AI Slop）及幻觉问题的系统性综述。研究背景是：LLM 被广泛集成到网络安全漏洞评估流程中，显著提升了自动化水平，但同时也引发了可信性危机——模型会生成幻觉漏洞、看似
Separating Disclosure from Authorization: Field-Tier Minimization for Agent Action Mediation
本文针对代理系统中动作授权与审计披露之间的根本冲突提出了一种新的架构设计。传统上，系统为了授权某个动作必须查看其原始参数，而为了审计又需要将这些参数记录在不可篡改的账本中，这导致敏感数据（如收件人、付款备注、记录标识符）被持久化存储，产生隐
iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check
CVE-2026-82475
iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to
Sudo through 1.9.17p2 Intercept Policy Bypass via execveat
CVE-2026-82474
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode.
Documenso before 2.13.0 Unauthenticated File Upload via /api/files/upload-pdf
CVE-2026-82472
Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication,
Rodauth before 2.47.0 TOTP Code Reuse via Drift Window
CVE-2026-82470
Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track
Rodauth before 2.47.0 Authentication Bypass via jwt_refresh
CVE-2026-82469
Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwt_refresh route that issues new JWT acces
Rodauth before 2.47.0 CSRF Protection Bypass via Content-Type
CVE-2026-82468
Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content
Rodauth before 2.46.0 Authentication Bypass via webauthn_login
CVE-2026-82466
Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route that allows logged-in