QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
CVE-2026-84784
QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
2026-10-04 归档
今日共收录 931 条安全情报，包含 128 个 CVE，457 篇安全通告，以及 95 篇研究论文。
← 返回归档列表Timing Side-Channel in SM2 Signature Generation
CVE-2026-77696
Timing Side-Channel in SM2 Signature Generation
QUIC Unvalidated Amplification Credit may be Over Accounted
CVE-2026-35191
QUIC Unvalidated Amplification Credit may be Over Accounted
QUIC Connection-Level Flow Control is Not Enforced for Streams
CVE-2026-75804
QUIC Connection-Level Flow Control is Not Enforced for Streams
Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC
CVE-2026-42772
Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC
Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V
CVE-2026-54875
Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V
Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves
CVE-2026-54872
Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves
Excessive Memory Allocation in Relative CRLDP Processing
CVE-2026-35189
Excessive Memory Allocation in Relative CRLDP Processing
DTLS Retransmits Handshake Messages From a Stale Buffer Offset
CVE-2026-84782
DTLS Retransmits Handshake Messages From a Stale Buffer Offset
Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
CVE-2026-75806
Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
NULL Pointer Dereference in CMP Client Revocation Response Handling
CVE-2026-75805
NULL Pointer Dereference in CMP Client Revocation Response Handling
QUIC STREAM Fragment Metadata DoS
CVE-2026-54873
QUIC STREAM Fragment Metadata DoS
SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF)
# Security Advisory — SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of `CheckHostSSRF`) | Field | Value | |-
Trigger.dev: Cross-environment deployment cancel
### Summary Trigger.dev isolates each project into multiple **environments** (`dev`, `staging`, `prod`, and per-PR `pre
Trigger.dev: Server-side request forgery via unvalidated webhook alert-channel URL
### Summary A project member can create a webhook alert channel whose delivery URL points at an internal address, and tr
ABSENTIA: Detecting Broken Access Control Vulnerabilities in Web Applications
该论文聚焦 Web 应用中最为普遍的安全风险之一——失效的访问控制（Broken Access Control, BAC），即授权机制的缺失或错误。作者指出，与注入类漏洞本质不同：注入是“不可信数据流入危险操作”的数据流问题，而授权是一种“
Helol Tunnel: Covert Channel Exploitation of TLS Extensibility & Privacy Features
该论文研究的是网络协议隐蔽信道，即利用协议本身的合法字段进行数据外泄与命令控制（C2）通信。作者把目标锁定在最普及的传输层安全协议 TLS 上，具体聚焦于握手阶段的 Client Hello（CHLO）报文：这些报文由大量可枚举、可组合的密
SafeDepth: Safety-Aware Token-Level Adaptive Computation
该论文关注 Transformer 推理加速中的 token 级自适应计算（token-level adaptive computation）所带来的安全副作用。以往研究认为并非每个 token 都需要经过全部层，因此出现了一批选择性跳层的
PassGPT+: Leveraging Linguistic Priors for Password Modeling
本文聚焦于密码这一仍占主导地位的在线认证机制，研究人类如何选择密码——这对防守方的口令强度评估与攻击方的口令猜测模拟同样关键。此前 PassGAN、PassGPT 等深度生成方法已证明可以从泄露口令库中直接学习口令结构，但二者都是从随机初始
Link Inference Attack on Privacy-Preserving Knowledge Graphs
本文研究知识图谱（Knowledge Graph, KG）在发布环节的隐私保护假设是否成立。KG 被广泛用于医疗、金融、社交网络等敏感领域，用于存储与共享结构化信息。业界常见的隐私做法是：在对外发布图数据之前，直接删除（隐藏）敏感关系所对应