GlitchLab: A Hardware-in-the-Loop Optimizer for Physical Fault Injection
物理故障注入（Physical Fault Injection）是一种通过短暂硬件扰动（如电压毛刺、时钟毛刺、电磁干扰等）诱发安全失效的技术，可能导致密钥恢复、认证绕过或控制流劫持等严重后果。然而，有效的故障参数搜索极具挑战：参数之间相互耦
2026-09-03 归档
今日共收录 1407 条安全情报，包含 491 个 CVE，487 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Capability-Gated Language Models: Security Composes, Utility Does Not
该论文针对大语言模型（LLM）部署中的安全访问控制问题，提出了一种称为“能力门控”（capability-gated）的部署范式。传统安全机制（如安全微调、过滤、遗忘）往往在模型权重外部按主体（principal）进行区分，例如通过配置不同
NeuroPriv: Adversarial Representation Learning for Privacy in Wearable EEG Systems
本文针对可穿戴 EEG（脑电图）系统在健康监测之外可能泄露神经隐私的问题展开研究。作者指出，尽管许多系统假设仅传输紧凑的频谱或空间特征而非原始 EEG 数据即可提供足够的隐私保护，但实际这些特征仍可能泄露用户身份和人口统计属性。以 EEGM
When Does Authorization End? Effect Closure at Provider Boundaries
本文研究分布式系统中授权撤销后的“效应闭合”（effect closure）问题，即撤销操作完成后，先前被授权的活动是否仍可能产生应用程序拒绝接受的效应。作者给出形式化定义：当现有授权不再保留任何此类路径，且无法签发新授权时，称该授权是闭合
Smart Contracts Claimed Vulnerable by the CVE Database, with Labels and Source Locations
本文介绍了一个名为 CVE-Smart-Contracts 的精选数据集，该数据集汇集了截至 2026 年 7 月 CVE 数据库中涉及以太坊智能合约的漏洞记录。研究背景在于：CVE 数据库广泛收录软硬件漏洞，其中也包含区块链程序（智能合约
Evaluating ML-based Intrusion Detection Systems: The Illusion of Model Efficacy
该论文关注基于机器学习的网络入侵检测系统（NIDS）评估中的系统性偏差问题。近年来，机器学习技术大量集成到入侵检测中，许多研究宣称模型具有高检测率、低误报率，甚至接近完美的性能，但作者认为这往往是一种“模型效能幻觉”，因为模型在面对训练中未
Card-Based Computation in the Virtual Player Simulation Model
该论文研究卡牌密码学中的一个新兴方向：虚拟玩家模拟模型下的通用卡牌计算。在传统卡牌安全计算中，目标通常是安全地计算某个函数，而虚拟玩家模拟场景增加了额外约束：卡牌代表持续变化的游戏状态，每次动作后虚拟玩家手牌中的剩余牌必须保持原样，并且理想
SVP Is NP-Hard for Some Rank-2 Cyclotomic Modules
这篇论文研究了分圆整数环上的最短向量问题（SVP）的计算复杂性。具体而言，设 q 为模 4 余 3 的素数，ζ_q 为 q 次本原单位根，K=Q(ζ_q) 为分圆域，其整数环为 O_K=Z[ζ_q]。作者证明了在 O_K^2 的全秩自由子模
Barriers to Using Static Application Security Testing (SAST) Tools: A Literature Review
本文是一篇关于静态应用安全测试（SAST）工具采用障碍的文献综述。研究背景是现代软件漏洞频繁导致安全事件，对企业和个人造成严重影响，而SAST工具本可通过识别和修复代码漏洞来加固应用安全，但许多开发团队并未在其开发环境中采用此类工具。作者通
UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by read...
CVE-2026-75135
CVE-2026-75135 是 UpSignOn for Windows 7.19.0 之前版本中存在的一个敏感数据暴露漏洞。该密码管理软件在进程内存中保留了一份备份密钥（backup key），即使用户已重新锁定保险库（vault），本
SEOWriting plugin for WordPress through 1.12.5 contains a stored cross-site scripting vulnerability that allows authenticated contributors to inject malicious JavaScript by expl...
CVE-2026-75134
CVE-2026-75134 是一个影响 WordPress 的 SEOWriting 插件（版本至 1.12.5）的存储型跨站脚本（XSS）漏洞。该漏洞源于插件在过滤用户提交内容时使用了过于宽松的 KSES 允许列表，明确允许 ifram
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.
CVE-2023-20577
CVE-2023-20577 是 AMD 平台系统管理模式 (SMM) 模块中的一个堆溢出漏洞。SMM 是 CPU 中一种高特权执行模式，通常用于固件操作，其内存区域受保护，一旦被攻破可完全控制平台。该漏洞源于 SMM 模块在处理某些数据时
A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionality of the file web.xml of the component Admin Console/DPO ...
CVE-2026-84839
CVE-2026-84839 是 tsi-coop 公司开发的 tsi-dpdp-cms 内容管理系统中存在的一处认证缺失漏洞，影响版本 0.5.0 及之前的所有版本。该漏洞位于 Admin Console/DPO Compliance C
A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulnerability is an unknown functionality of the file packages...
CVE-2026-84833
A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulne
HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request._prepare() in src/httpx2/httpx2/_models.py can add a body-derived Content-Length header to a request...
CVE-2026-84380
HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request._prepare() in src/httpx2/httpx2/_models.py
HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, FileField.render_headers() in src/httpx2/httpx2/_multipart.py directly interpolates attacker-controlled cont...
CVE-2026-84379
HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, FileField.render_headers() in src/httpx2/httpx2/_mu
HTTPX2 is a next generation HTTP client for Python. From 2.5.0 until 2.10.0, the HTTPX2 Server-Sent Events parser in src/httpx2/httpx2/_sse.py repeatedly copies and rescans buff...
CVE-2026-84378
HTTPX2 is a next generation HTTP client for Python. From 2.5.0 until 2.10.0, the HTTPX2 Server-Sent Events parser in src
libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box siz...
CVE-2026-82522
libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers
A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly enforce the intended authorization che...
CVE-2026-77125
A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints
In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did not verify whether script execution had been administrati...
CVE-2026-77124
In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did