2026-10-13 归档

今日共收录 1460 条安全情报,包含 709 个 CVE,466 篇安全通告,以及 13 篇研究论文。

← 返回归档列表
学术论文2026-10-09 发布INFO

Decision-Focused Learning for Cyber-Physical Risk-Aware Power Grid Operations

Power grid cyber-physical security requires intrusion detection methods that account for the operational consequences of

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-09 发布INFO

APEX-Harm: Evaluating Agent Safety in Shared Professional Workspaces

Professional agents increasingly work through command-line interfaces and multiple tools over shared workspaces containi

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-09 发布INFO

A Systematic Study of Security Enforcement at Android Inter-Component Boundaries

Android's inter-process communication (IPC) mechanisms (Activities, Services, BroadcastReceivers, ContentProviders, and

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-09 发布INFO

Towards Safe World Models: Risks, Defenses, and Evaluation

World models support planning, control, learning from imagined experience, and model-mediated evaluation by predicting a

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-09 发布INFO

Secrets in Preamble: Practical and Robust PHY Information Hiding for Wi-Fi

Physical layer (PHY) information hiding refers to the concealment of secrets within PHY waveforms without compromising t

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-09 发布INFO

ECGWmark: Deep Watermarking for Electrocardiogram Signals

Secure transmission of electrocardiogram (ECG) signals remains a major challenge in telecardiology. While traditional ma

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-09 发布INFO

LETHE: Defending against Unauthorized Image-to-Video Generation via Value Diversity Collapse

Image-to-video (I2V) diffusion models can animate a single reference image into high-quality, subject-consistent videos,

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-09 发布INFO

Quantization-Tolerant Gradient Auditing for Active Inference-Attack Detection in Federated Learning

Inside a federated learning system a participant can quietly study the shared model and learn about others' private data

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-09 发布INFO

Understanding and Mitigating Cross-Session Attacks via Persistent Artifacts in Agent Skill Composition

Agent skills extend the capabilities of AI agents by bundling instructions, code, and resources into reusable packages.

历史摘要 · 未重新核验 · arXiv cs.CR

漏洞预警2026-10-13 发布INFO

The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an unauthenticated upload handler, allowing unauthenticated ...

CVE-2026-89271

The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress's HTML sanitization when rendering it, allowing users wit...

CVE-2026-89269

The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress'

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweaver Weaver Xtreme Theme Support weaverx-theme-support allows Stored XS...

CVE-2026-54870

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweaver Weaver Xt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.Thi...

CVE-2026-54869

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This is...

CVE-2026-54868

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Sim

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Griden Responsive Slider responsive-slider allows Stored XSS.This issue aff...

CVE-2026-54867

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Griden Responsive

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function session_start of the file controller/employee.ph...

CVE-2026-108972

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::addNewUser of the fil...

CVE-2026-108970

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Sessi...

CVE-2026-108969

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c991

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/sales_history.php. This m...

CVE-2026-108968

A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown fu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/edit_credit.php. The manipulatio...

CVE-2026-108967

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function

历史摘要 · 未重新核验 · NVD