Proximity Gaps for Gabidulin Codes and Applications
本论文研究秩度量（rank-metric）线性码的邻近性间隙（proximity gap）问题及其密码学应用。邻近性间隙是交互式 Oracle 邻近性证明（IOPP）与多项式承诺方案（PCS）可靠性（soundness）分析的核心概念：对于
2026-09-12 归档
今日共收录 1637 条安全情报，包含 801 个 CVE，449 篇安全通告，以及 100 篇研究论文。
← 返回归档列表EFI Pairs Without One-Way Puzzles: Oracle Separations from Communication Complexity
本文研究量子密码学中最基础的两类"最小假设"候选原语之间的关系。第一类是 EFI pairs（Brakerski、Canetti、Qian，ITCS 2023），指一对高效可制备的量子态：它们在统计上相距很远（可区分），但在计算上对任何多项
Accountability in Certificate Transparency and Variants
该论文针对证书透明化（Certificate Transparency, CT）这一已被所有主流浏览器支持的 TLS 证书生态机制，重新梳理其安全目标并给出严格的形式化分析。CT 的设计初衷是降低对证书颁发机构（CA）的信任依赖：所有 CA
Decentralized network congestion control for DAG-based distributed ledger system
该论文聚焦于分布式账本技术（DLT）网络中一个长期被忽视的问题：去中心化网络的拥塞控制。作者指出，中心化通信系统的拥塞控制已是成熟研究领域，但针对去中心化网络、尤其是区块链与基于有向无环图（DAG）的 DLT 网络的拥塞控制研究起步较晚且不
When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party administrative interface directly to that interface without ap...
CVE-2026-90449
CVE-2026-90449 揭示了某反向代理/网关产品在特定认证模式下存在的访问控制设计缺陷。当系统被配置为某一特定认证模式时，反向代理在处理指向内置第三方管理界面的请求时，会将这些请求直接转发至该第三方界面，而不会先施加网关自身的认证要
Mousehole is a background service to update a seedbox IP for MAM and web app to manage it. Prior to version 0.4.05, Mousehole's HTTP/WebSocket management boundary is reachable w...
CVE-2026-50025
Mousehole is a background service to update a seedbox IP for MAM and web app to manage it. Prior to version 0.4.05, Mous
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The `nl.nl-por...
CVE-2026-49464
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, custom
In the Linux kernel, the following vulnerability has been resolved: btrfs: write-protect folios during data writeback commit 095be159f3eb ("btrfs: unify folio dirty flag clear...
CVE-2026-89772
In the Linux kernel, the following vulnerability has been resolved: btrfs: write-protect folios during data writeback
In the Linux kernel, the following vulnerability has been resolved: ovl: fix double end_creating() on the casefold-mismatch path ovl_create_real() releases the new dentry twic...
CVE-2026-89767
In the Linux kernel, the following vulnerability has been resolved: ovl: fix double end_creating() on the casefold-mism
In the Linux kernel, the following vulnerability has been resolved: nfsd: don't free session slots that are still in use nfsd4_sequence() can free the very slot it is currentl...
CVE-2026-89689
In the Linux kernel, the following vulnerability has been resolved: nfsd: don't free session slots that are still in us
In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointer to it...
CVE-2026-89660
In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin st
In the Linux kernel, the following vulnerability has been resolved: sctp: fix NULL deref on untransmitted RECONF completion sctp_process_strreset_outreq(), sctp_process_strres...
CVE-2026-89477
In the Linux kernel, the following vulnerability has been resolved: sctp: fix NULL deref on untransmitted RECONF comple
In the Linux kernel, the following vulnerability has been resolved: net/iucv: filter frames in afiucv_hs_rcv() by ingress device afiucv_hs_rcv() selects a socket from iucv_sk_...
CVE-2026-81003
In the Linux kernel, the following vulnerability has been resolved: net/iucv: filter frames in afiucv_hs_rcv() by ingre
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes tag below made so f...
CVE-2026-80994
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on f
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), before 2...
CVE-2026-78547
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app f
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over ...
CVE-2026-77490
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The `nl.nl-por...
CVE-2026-49463
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, custom
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
CVE-2026-70341
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before acting on them, al...
CVE-2026-82215
The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the pa
The Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all v...
CVE-2026-81754
The Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… plugin for WordPress is vulnerable to S