Google Mobile Services
Google Mobile Services
2026-10-03 归档
今日共收录 1361 条安全情报，包含 499 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Chrome Dev for Android Update
Hi everyone! We've just released Chrome Dev 157 (157.0.8080.0) for Android. It's now available on Google Play.You can se
Firewall for AI
Firewall for AI
Follow the thread: a new dashboard to investigate account abuse
Fraudsters are increasingly using AI to bypass stateless security checks. Cloudflare's new Account Abuse Protection dash
GitLab warns of critical RCE vulnerability in AI Gateway service
GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbi
Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head...
CVE-2026-105090
Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enfor
In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes...
CVE-2026-105080
In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-conve
IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-104475
IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows authenticated users to inj
The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows...
CVE-2026-97212
The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate...
CVE-2026-95102
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a res
Armatura One's message broker logs client connection credentials and the associated password in...
CVE-2026-94594
Armatura One's message broker logs client connection credentials and the associated password in plain text during normal
gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled
CVE-2026-73802
### Summary act_runner appends workflow-controlled `jobs..container.options` directly to the Docker HostConfig for the
UTMStack before 11.2.16 contains a missing authorization vulnerability in...
CVE-2026-82041
UTMStack before 11.2.16 contains a missing authorization vulnerability in UTMIncidentCommandWebsocket.processCommand(),
UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote...
CVE-2026-82042
UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full admini
UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows...
CVE-2026-82044
UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make
UTMStack before 11.2.16 contains a server-side request forgery vulnerability in...
CVE-2026-82040
UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadata
Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache...
CVE-2026-102795
Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0
The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows...
CVE-2026-96613
The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to a
TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the tool...
CVE-2026-51915
TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the tool controller. In affected source
Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection
随着大语言模型（LLM）与参数高效微调（PEFT）方法（尤其是 LoRA）的快速普及，模型从第三方获取适配器权重已成为常见工程实践，但这也使后门攻击的风险显著加剧：攻击者只需发布一个看似正常的 LoRA 适配器，就可能在特定触发条件下让下游