From Hypervisor to Container: Cloud Security Vulnerabilities, Defense Mechanisms, and Open Challenges
该论文是一篇系统性综述，聚焦云计算多租户共享物理硬件所导致的隔离边界失效问题。作者收集并分析了 2008 至 2025 年间超过 120 篇安全文献，覆盖虚拟机隔离与容器隔离两条主线。论文考察的威胁类别包括：虚拟机逃逸（guest 突破 h
2026-09-16 归档
今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Implementing a White-Box Undetectable Backdoor for Random Fourier Features
Goldwasser 等人此前证明，在随机傅里叶特征（RFF）算法训练的机器学习模型中，可以植入一类不可检测后门，其安全性建立在与连续学习带误差问题（CLWE）相关的困难假设之上；在标准密码学假设下，即使对模型权重做完全白盒审计也无法发现该
Private Information Retrieval With Arbitrary Privacy Requirements: Introduction and Capacity Results
本文（arXiv，cs.IT / cs.NI / eess.SP，作者 Mohamed Nomeir、Shreya Meel、Sennur Ulukus）研究图结构存储系统中「任意隐私需求」下的私有信息检索（PIR）问题。研究动机来自三重现
The WP-Lister Lite for eBay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via AJAX Cron Handler Request Parameter in all versions up to, and including, 3.8.9...
CVE-2026-18595
CVE-2026-18595 是 WordPress 平台第三方插件 WP-Lister Lite for eBay 中的一个存储型跨站脚本（Stored XSS）漏洞。该插件用于将 WooCommerce 商品批量刊登、同步到 eBay
The Advanced Popups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Notification Button Link' Field in all versions up to, and including, 1.2.3 due to ins...
CVE-2026-11996
CVE-2026-11996 是影响 WordPress 插件 Advanced Popups 的存储型跨站脚本 (Stored XSS) 漏洞,受影响范围为 1.2.3 及之前的所有版本。漏洞根源在于插件对 'Notification B
A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin ...
CVE-2026-92247
CVE-2026-92247 是 NVD 收录的一则针对开源内容管理系统 Synaptik CMS（包名 synaptikcms/synaptik-cms）的文件上传类漏洞，影响版本为 1.3.4.4 及以前的所有版本。问题出在后台管理组件
On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can s...
CVE-2026-73450
该漏洞影响运行 Arista EOS 且启用了 MLAG(Multi-Chassis Link Aggregation)Dual Primary Detection(双主检测)功能的交换机平台。MLAG 允许两台交换机以逻辑单机方式工作,双
EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs instead of a cryptographically secure generator...
CVE-2026-92298
该漏洞影响 EspoCRM 10.0.8 及之前的所有版本。EspoCRM 是一款开源的客户关系管理（CRM）与销售自动化平台，广泛用于线索管理、营销活动和客户互动。问题根源在于：系统在三个业务场景中——潜在客户线索捕获（lead-capt
Channel-Aware Selection of Folded Bloom Filters for Distributed Systems
在通信受限的分布式系统中，周期性传输 Bloom filter 会带来可观的带宽与能耗开销。已有的两类思路各有取舍：无损压缩能完整保留成员性语义，但传输尺寸是固定的、无法按需缩减；OR 折叠（OR folding）可以生成更小的表示并保持“
A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/ag_ui_strands/...
CVE-2026-92184
A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of th
On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS gra...
CVE-2026-73460
On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be u...
CVE-2026-73459
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially c
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit (PDU) that...
CVE-2026-73446
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.
CVE-2026-15640
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.
An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker.
CVE-2026-15639
An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScrip
An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is n...
CVE-2026-15638
An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using on
A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user...
CVE-2025-11395
A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create
Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overf...
CVE-2026-92259
Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the by
Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval() sinks, affecting the call board text and p...
CVE-2026-92257
Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages t
Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in filter_arp_put_file.cgi caused by improper use of a string handling API. Attackers can trigger...
CVE-2026-92255
Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in filter_arp_put_file.cgi caused by imp