2026-09-21 归档

今日共收录 815 条安全情报,包含 111 个 CVE,394 篇安全通告,以及 53 篇研究论文。

← 返回归档列表
学术论文2026-09-18 发布INFO

Batched Paillier-Based Hamming-Distance Computation over Binary Embeddings

本论文研究的是在加密二进制嵌入(binary embeddings)场景下,如何高效完成汉明距离(Hamming distance)计算的问题。背景是:加法同态加密(此处采用 Paillier 体制)允许把计算外包给不可信的服务器,从而在隐

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-09-17 发布INFO

Compact Vision Models for Iris Presentation Attack Detection under Presentation Attack Instrument Shift and Environmental Degradation

该论文关注虹膜活体检测(Presentation Attack Detection, PAD)在真实部署中的鲁棒性问题:一个在开发阶段表现可靠的子模块,一旦遇到验证集中从未出现过的呈现攻击工具(Presentation Attack Ins

历史摘要 · 未重新核验 · arXiv cs.CR

漏洞预警2026-09-21 发布MEDIUM

nvm resolves a requested version or alias by treating it as a filename under $NVM_DIR/alias. Before 0.40.8, nvm_alias() concatenated the requested name onto that directory and r...

CVE-2026-94185

nvm 通过把请求的版本号或别名当作 $NVM_DIR/alias 目录下的文件名来解析。在 0.40.8 之前,nvm_alias() 只是把请求的名称直接拼接到该目录路径后读取文件,完全没有做“结果必须仍位于 alias 目录内”的包含

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布MEDIUM

A flaw has been found in OpenClaw up to 2026.9.5. Affected is the function createCanvasHostHandler of the file extensions/canvas/src/host/server.ts of the component Canvas Host ...

CVE-2026-94094

CVE-2026-94094 是 OpenClaw 的 Canvas Host 组件中一个已公开披露的拒绝服务缺陷,影响 OpenClaw 2026.9.5 及更早版本。问题位于 extensions/canvas/src/host/ser

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布MEDIUM

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/load_replay_buffer/VecNormalize.load of the file save_util...

CVE-2026-94093

CVE-2026-94093 涉及 DLR-RM 维护的强化学习库 stable-baselines3(影响 2.9.0 及之前版本)。该库的模型持久化工具文件 save_util.py 在 PPO.load、load_replay_buf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function load_info/_read_torch_data of the file utils.py. Performing a manipulation of the argument path r...

CVE-2026-94092

A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function load_info/_read_torch_data of the file u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This manipul...

CVE-2026-94091

A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file ge

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug of the file manape/pe.cpp of the component PE Parser. Th...

CVE-2026-94090

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. Affected by this vulnerability is the function ControlFlowNode of the file loca...

CVE-2026-94051

A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. Affected by this vulne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function render_slides of the file packages/cli/src/renderer.ts. This manipulation of the argument htmlP...

CVE-2026-94049

A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function render_slides of the file packages/cli

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulati...

CVE-2026-94048

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of ...

CVE-2026-94047

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function impor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function get_file_snippet of the file getFileSnippet.ts of the component MCP T...

CVE-2026-94046

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function get_file_sni

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown function of the file controller/common/UploadController.java of the component G...

CVE-2026-94045

A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown function of the file c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function create_file of the file app/api/mcp/route...

CVE-2026-94044

A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_deps/free5gc/NFs/amf/internal/gmm/handler.go of the compon...

CVE-2026-94043

A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_query of the file admin...

CVE-2026-94042

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is some unknown functionalit...

CVE-2026-94041

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveWatermark() copied...

CVE-2026-88857

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions updateOSGallery(), rea...

CVE-2026-88856

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension f

历史摘要 · 未重新核验 · NVD