Client accepts unsolicited RawPublicKey server certificate type
CVE-2026-89136
Client accepts unsolicited RawPublicKey server certificate type
2026-10-02 归档
今日共收录 1399 条安全情报，包含 504 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表NameConstraints not enforced across unconstrained intermediate CA
CVE-2026-89133
NameConstraints not enforced across unconstrained intermediate CA
Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion
CVE-2026-42784
Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion
Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow
CVE-2026-88832
Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.
CVE-2026-103111
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-
Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer
CVE-2026-6669
Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer
Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler
CVE-2026-61674
Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler
alsa-lib through 1.2.16.1 Denial of Service via pcm_multi
CVE-2026-96675
alsa-lib through 1.2.16.1 Denial of Service via pcm_multi
alsa-lib through 1.2.16.1 Integer Overflow via Topology File
CVE-2026-96674
alsa-lib through 1.2.16.1 Integer Overflow via Topology File
iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS
CVE-2026-102253
iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS
libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc
CVE-2026-102633
libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
CVE-2026-104286
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting
devalue: Sparse arrays emitted by uneval cause eager allocation when evaluated
Evaluating legitimate `uneval` output for a sparse array can allocate memory proportional to its declared length. A tiny
ABSENTIA: Detecting Broken Access Control Vulnerabilities in Web Applications
访问控制失效(Broken Access Control, BAC)是最常见的 Web 安全风险之一, 论文指出它与注入类漏洞存在本质差异: 注入是"不可信输入流向危险操作"的数据流问题, 可用污点传播等通用规则刻画; 而授权是一种"关系"
SafeDepth: Safety-Aware Token-Level Adaptive Computation
近期研究指出并非每个 token 都需要经过全部 Transformer 层，因此出现了 token 级自适应推理模型，通过选择性跳层来降低计算量。该论文首先揭示了一个被忽视的安全副作用：现有 token 级自适应推理模型相比其参考骨干模型
Link Inference Attack on Privacy-Preserving Knowledge Graphs
该论文研究知识图谱（KG）在医疗、金融、社交网络等敏感领域的发布隐私问题。业界常见做法是在发布前删除敏感关系（即删除图中的边），并默认“删边即安全”。作者挑战这一假设，指出即使某条关系被完全或部分隐藏，其存在仍会在公开子图的结构（拓扑）中留
Evidence Coverage for Intent-Bound Execution: Scope, Obligations, and Cutoff Reasoning
本文研究一个在审计、取证与自动化执行核查中普遍存在但常被忽视的问题：验证方即使对每一条可获得的记录都完成了真实性/完整性认证，仍然没有充分理由宣称某次执行的记录集合是『完整』的。要做出完整性断言，必须首先论证清楚『对本次被执行的对象而言，究
PassGPT+: Leveraging Linguistic Priors for Password Modeling
该论文关注口令（密码）这一仍然占据主导地位的在线身份认证机制，指出无论是防御侧的口令强度估计，还是攻击侧的口令猜测模拟，都需要准确建模人类选择口令的行为规律。近年来的学习式方法（如 PassGAN、PassGPT）已经证明深度生成模型可以直
Learning Normal Diffusion Dynamics for Backdoor Defense in Text-to-Image Models
该论文关注文生图（T2I）扩散模型面临的后门攻击威胁，指出已有防御方法大多依赖在模型内部表示中识别某种特定的异常模式（如特定激活、特定注意力头或特定噪声特征），这种“模式匹配”思路在攻击机制不断多样化时泛化能力受限。作者转而从“转移动力学”
Helol Tunnel: Covert Channel Exploitation of TLS Extensibility & Privacy Features
该论文提出并评估了一种名为 Helol Tunnel 的隐蔽信道，其目标是利用 TLS 协议 Client Hello（CHLO）报文自身的可扩展性与隐私特性来承载信息。CHLO 中包含大量可枚举、可排序的密码学信息元素（如扩展列表、密码套