DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes

## Environment - dompurify 3.4.15 (current npm release); reproduced independently on jsdom 30.0.1 and 29.1.1 (Node.js 2

历史摘要 · 未重新核验 · GitHub Advisory

smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line

### Summary `parse()` has a quadratic-time path in `parseKey`, reachable on default options with ordinary valid input.

历史摘要 · 未重新核验 · GitHub Advisory

Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

Rustls accepted TLS 1.3 handshake messages sent at the wrong encryption level when they followed a key-changing message

历史摘要 · 未重新核验 · GitHub Advisory

Nx: OS command injection via git revisions and remote refs

## Summary Nx core builds several `git` invocations as shell command strings with untrusted values interpolated into th

历史摘要 · 未重新核验 · GitHub Advisory

[原创]某游戏大厂反作弊驱动分析：从代码去混淆到敏感行为还原，CVE-2025-45737任意内核读写漏洞复现、提权实验，附PoC

CVE-2025-45737

[原创]某游戏大厂反作弊驱动分析：从代码去混淆到敏感行为还原，CVE-2025-45737任意内核读写漏洞复现、提权实验，附PoC

历史摘要 · 未重新核验 · 看雪

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

CVE-2026-61500

A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according

历史摘要 · 未重新核验 · The Hacker News

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI

CVE-2026-61500

CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE. The po

历史摘要 · 未重新核验 · SecurityWeek

The Poisoned Conversation: Privacy-Leaking Watermarks in Unified Multimodal Models

该论文关注统一式多模态模型（unified multimodal models）带来的新型隐私威胁。此类模型在同一个对话上下文中既能理解也能生成文本、图像等多种模态，交互更流畅自然，但这一设计也改变了原有的隐私威胁模型：对话某一部分暴露的信

历史摘要 · 未重新核验 · arXiv cs.CR

Bounded Provisional Visibility: Controlling Poisoning Exposure in Continuously Ingested RAG Vector Stores

该论文研究持续摄取场景下 RAG 向量库的投毒暴露控制问题。传统准入决策通常只判断内容是否可入库，但连续摄入会让新内容在验证完成前就进入检索路径，形成时间攻击面。作者提出一种 fail-closed 的临时可见性协议：新内容在配置的截止时间

历史摘要 · 未重新核验 · arXiv cs.CR

Auditing the Privacy of Synthetic Gene Expression Data: A Unified Weighted-Distance Framework for No-Box Membership Inference

合成基因表达数据被视为受控访问基因组库的隐私保护替代方案，但其隐私安全性必须通过实证审计验证。成员推断攻击（MIA）通过判断某患者的基因表达谱是否参与生成模型训练来完成这一审计。本文针对 ELSA Health 2026 挑战赛发布的、源自

历史摘要 · 未重新核验 · arXiv cs.CR

Tight Query Lower Bounds for Quantum Sampling, with an Application to Certified Randomness

该论文研究量子随机电路采样（RCS）实验的可信度刻画问题。RCS 是目前展示量子计算优势的主要实验范式，其验证普遍采用线性交叉熵基准（XEB）：用设备实际输出在理想分布下的概率为其打分，分数越高被认为越接近理想采样。然而，高分究竟能证明一个

历史摘要 · 未重新核验 · arXiv cs.CR

StateSync-GKR: Machine-Checking the Trust Chain from Sparse-Merkle State Transitions to GKR Verification

该论文处理的是一个在可验证计算工程中常被忽视的信任缺口：GKR 协议的可靠性界只能保证『关于某个算术电路的输出声明是可信的』，却无法保证『该电路确实编码了应用所期望的状态转移』。作者以稀疏 Merkle 树（SMT）的成员证明、非成员证明与

历史摘要 · 未重新核验 · arXiv cs.CR

Private online learning and prediction for Littlestone classes

We study mistake bounds for differentially private online learning and online prediction under oblivious realisable adve

历史摘要 · 未重新核验 · arXiv cs.CR

Differentially Private Mixing of Public Datasets Improves Private Learning

Many machine learning applications involve sensitive data and therefore require training under differential privacy (DP)

历史摘要 · 未重新核验 · arXiv cs.CR

Terracotta: Enabling the Adoption of New DRAM Techniques via a Flexible DRAM Interface and Memory Controller

DRAM continues to limit the performance, energy efficiency, and robustness of modern systems. Many prior works propose D

历史摘要 · 未重新核验 · arXiv cs.CR

Cryptanalysis of a Class of Ideal Secret Sharing Schemes Based on the CRT for Polynomial Rings

Based on the CRT for polynomial rings, Yang, Zhu, Fu and Xia (ISIT 2026) proposed a compartmented secret sharing scheme

历史摘要 · 未重新核验 · arXiv cs.CR

SatBleed: Security of Commoditized Communication Modules in Satellites

Substantial reduction in launch and manufacturing costs has resulted in the accelerated deployment of small satellite mi

历史摘要 · 未重新核验 · arXiv cs.CR

PRA-TLS: Attestation of a Client Application for TEE

Trusted Execution Environments (TEEs) are secure foundations for protecting sensitive information and executing computat

历史摘要 · 未重新核验 · arXiv cs.CR

Adaptive-Shot Hybrid Quantum Anomaly Detection for Tactile Internet Security: Reliability-Aware Measurement Allocation Under Resource Constraints

Tactile Internet (TI) security analytics must balance reliable thresholded decisions with constrained computational and

历史摘要 · 未重新核验 · arXiv cs.CR

Online AutoML: Evaluating Poisoning Attacks on Adversarial Training Defense Strategy in IoT Networks

Machine learning (ML)-powered poisoning attack vectors are adversarial maneuvers whereby an attacker intentionally inser

历史摘要 · 未重新核验 · arXiv cs.CR