Poster: An Exploration of Large Language Models in Malicious Source Code Detection.
该论文提出了一种名为 Mal-LLM 的恶意源代码检测框架，旨在应对软件供应链中嵌入恶意代码的安全挑战。现有检测方法包括基于签名、行为分析和传统机器学习模型，但这些方法普遍缺乏结果的可解释性，难以向安全分析人员清晰解释为何某段代码被判为恶意
2026-08-31 归档
今日共收录 884 条安全情报，包含 132 个 CVE，408 篇安全通告，以及 86 篇研究论文。
← 返回归档列表A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an...
CVE-2026-82605
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the comp
A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an...
CVE-2026-82594
A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the co
A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of...
CVE-2026-82592
A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDisk
A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file ...
CVE-2026-82593
A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgr
AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability...
CVE-2026-56718
AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web ser
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog()...
CVE-2026-82653
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package nam
WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the...
CVE-2026-82648
WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails
Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB...
CVE-2026-82642
Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized wit
A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function...
CVE-2026-82542
A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the fi
jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing...
CVE-2026-82638
jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing unauthenticated attackers t
Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the...
CVE-2026-82633
Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the Users::getGroups REST API
browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in...
CVE-2026-82640
browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or
browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in...
CVE-2026-82637
browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing atta
Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command...
CVE-2026-82635
Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command onto the user's Downloads
A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function...
CVE-2026-82539
A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of t
The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not...
CVE-2026-14835
The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custo
The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to...
CVE-2026-15980
The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5.
The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to...
CVE-2026-15369
The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versio
Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection...
CVE-2026-82476
Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection in its link-metadata f