Alert for CVE-2026-35273

CVE-2026-35273

Alert for CVE-2026-35273

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

CVE-2026-107406

Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that co

历史摘要 · 未重新核验 · The Hacker News

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability

CVE-2026-107406

The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service. The post Citr

历史摘要 · 未重新核验 · SecurityWeek

Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trusted

## Summary Vikunja ships with `cors.origins` defaulting to `http://127.0.0.1:*` and `http://localhost:*`, and sends `Ac

历史摘要 · 未重新核验 · GitHub Advisory

pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host

## Summary pyLoad ships the WindowsPhoneNotify addon, whose `send()` method opens an HTTP connection to a host taken di

历史摘要 · 未重新核验 · GitHub Advisory

pyLoad has an authentication bypass in API key validation (check_apikey cache)

## Summary The API-key cache in `check_apikey()` allows an attacker to authenticate with a **forged API key** as long a

历史摘要 · 未重新核验 · GitHub Advisory

One Node, Two Roles: Simultaneous Contests for Validation and Attention in Rollups

An optimistic rollup is safe as long as at least one honest validator executes its state transition function (STF) and d

历史摘要 · 未重新核验 · arXiv cs.CR

Protecting CPU AI On Edge TEEs: WebAssembly's Promise and Practical Challenges

AI models on edge hardware contain important intellectual property (IP), but an adversary can steal it when they achieve

历史摘要 · 未重新核验 · arXiv cs.CR

HPQ-AKE: A Provably Secure Sign-Less Hybrid Authenticated Key Exchange Protocol for Bandwidth-Constrained IoT and Edge Networks

Securing bandwidth-constrained Internet of Things (IoT) and edge networks during post-quantum migration creates an authe

历史摘要 · 未重新核验 · arXiv cs.CR

Moving Target Defense in SDN-enabled EV Charging Network

Software-Defined Networking (SDN) is emerging as a promis- ing technology for EV Charging infrastructure (EVCI) since it

历史摘要 · 未重新核验 · arXiv cs.CR

From Public Posts to AI-Search Citations: Measuring the Fragility of AI Search

As more users ask AI systems for information, AI-search platforms are becoming a common gateway to web information. Unli

历史摘要 · 未重新核验 · arXiv cs.CR

Certifying Hidden Paths: Scalable Topology Assurance for QKD Networks

Large-scale Quantum Key Distribution (QKD) networks rely on trusted repeaters, making the security properties of the sel

历史摘要 · 未重新核验 · arXiv cs.CR

A Zero-Knowledge Signature Framework for Efficient Post-Quantum Message Authentication in Cooperative Automated Driving

Connected and Automated Vehicles (CAV) rely on authenticated Vehicle-to-Everything (V2X) communications to exchange safe

历史摘要 · 未重新核验 · arXiv cs.CR

ProxyEraseAgent: Blind Watermark Removal in the Wild

Invisible image watermark removal has received growing attention. Despite substantial progress, existing attacks face a

历史摘要 · 未重新核验 · arXiv cs.CR

Soft Voting for Policy-Aware Private Data Synthesis

Blowfish privacy relaxes differential privacy (DP) by protecting only the attribute-value substitutions a data owner spe

历史摘要 · 未重新核验 · arXiv cs.CR

Accelerating HQC for Post-Quantum TLS 1.3 on x86 IoT Gateways

Post-quantum TLS at an IoT gateway must protect many device connections without large increases in handshake delay, CPU

历史摘要 · 未重新核验 · arXiv cs.CR

Applying Security by Design at the Point of Execution: How Governed Security Requirements Affect the Security of AI-Generated Code

Security by design asks that security requirements are defined before code is written. Secure-code benchmarks typically

历史摘要 · 未重新核验 · arXiv cs.CR

SoK: Failure Modes in Common Criteria Product Evaluation - A Taxonomy and Design-for-Evaluability Guidance

The Common Criteria (CC; ISO/IEC 15408) is the principal international framework for evaluating the security of IT produ

历史摘要 · 未重新核验 · arXiv cs.CR

Pump-and-Dump meets Honeypot Tokens: Detection and Analysis of Telegram Bait-and-Trap Schemes

While Pump-and-Dump schemes have been extensively studied on centralized exchanges (CEXs), how they operate in decentral

历史摘要 · 未重新核验 · arXiv cs.CR

The Price of Privacy: Randomness Complexity of Graph-Based Multi-Secret Sharing

We study the randomness required to share possibly correlated secret bits among parties connected by a graph. A dealer p

历史摘要 · 未重新核验 · arXiv cs.CR