MFSA 2026-89Security Vulnerabilities fixed in Firefox for iOS 155.1
MFSA 2026-89Security Vulnerabilities fixed in Firefox for iOS 155.1
2026-10-05 归档
今日共收录 815 条安全情报，包含 115 个 CVE，364 篇安全通告，以及 81 篇研究论文。
← 返回归档列表iOS 27 and iPadOS 27
iOS 27 and iPadOS 27
iOS 26.7 and iPadOS 26.7
iOS 26.7 and iPadOS 26.7
【大模型服务平台 TokenHub】& 【云开发 CloudBase】 关于腾讯云 MiMo-V2.5-Pro 模型下线及切换升级的通知
【大模型服务平台 TokenHub】& 【云开发 CloudBase】 关于腾讯云 MiMo-V2.5-Pro 模型下线及切换升级的通知
iOS 26.7.1 and iPadOS 26.7.1
iOS 26.7.1 and iPadOS 26.7.1
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 DeepSeek-V4-Flash 0731 模型下线及自动切换的通知
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 DeepSeek-V4-Flash 0731 模型下线及自动切换的通知
Android repository
Android repository
@AndroidDev on X
@AndroidDev on X
Android Help Center
Android Help Center
www.android.com
www.android.com
Google Mobile Services
Google Mobile Services
Firewall for AI
Firewall for AI
WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users...
CVE-2026-105089
WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission
YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action...
CVE-2026-105224
YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors t
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability:...
CVE-2026-105209
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey o
Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers...
CVE-2026-105214
Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server requ
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-103355
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements
A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file...
CVE-2026-105137
A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of th
Persona Guardrail: A Production-Grade Defense Framework for Agentic Systems
该论文关注的是基于大语言模型的智能体（agent）在生产环境中的功能边界失控问题。作者指出，当前多数运行时护栏（runtime guardrail）主要针对提示注入等特定攻击行为，且普遍在黑盒威胁模型下工作，难以保证智能体「只在被授权的功能
Hop-Decayed Influence: New Vulnerabilities of Structural Auxiliary Indexing in GraphRAG Pipelines with LLM
该论文关注的是一种此前被忽视的攻击面：GraphRAG（图增强检索生成）流水线在离线索引阶段会生成大量「辅助结构」，包括语义摘要、层级边以及预计算的评分/排序结果，这些产物并不属于原始知识图谱的实例数据，却在查询时直接决定检索的优先级与召回