BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass...
CVE-2026-111283
BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthen
2026-10-16 归档
今日共收录 833 条安全情报，包含 0 个 CVE，434 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code...
CVE-2026-111281
Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that a
Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation
CVE-2026-94603
### Impact Podman v4.4.0 added a feature where container checkpoints (from the `podman container checkpoint` command) co
JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked
CVE-2026-102832
## Description A Markdown file or a notebook output can carry a button that runs a JupyterLab command. Since 4.5.7 the
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks
CVE-2026-77459
### Impact Argo CD checks an Application's AppProject before it creates resources during a sync. That check covers dest
unstructured: Stored XSS via unescaped HTML generation
CVE-2026-104250
### Summary When `unstructured` parses an untrusted document and outputs the result as HTML, malicious markup contained
Private Retrieval Augmented Generation via Random Projection
Retrieval-Augmented Generation (RAG) enhances the capabilities of large language models (LLMs) by querying external stru
Poisoning the Neighborhood: A Topology-Aware Topic-Level Attack on Large-Scale HNSW-based RAG Systems
Retrieval-augmented generation (RAG) mitigates hallucinations and knowledge staleness in large language models using ext
From One Query to Many: A Critical Survey of Privacy Accounting in RAG
Retrieval-augmented generation (RAG) enables large language models to leverage external knowledge but introduces privacy
Approve What, Exactly? Effect Binding and Trusted Rendering for Agent Step-Up Authorization
AI agents now pause for approval before they send money, delete files or email outsiders, and that approval is usually t
Thinking in Graphs: Neo4j-Backed Exploit-Chain Reasoning for LLM Penetration-Testing Agents
LLM coding agents such as Claude Code and OpenAI Codex can drive penetration-testing tools, but they reason about an eng
Towards Efficient Threat Intelligence Instruction Tuning via Quality-Aware and Optimal Transport-Guided Data Selection
High-quality data is essential for improving instruction tuning in threat intelligence analysis. However, existing metho
CascadeLedger: Counterfactual Auditing of Information and Resource Integrity in LLM Cascades
We introduce CascadeLedger, a counterfactual execution-audit framework for budgeted language-model cascades. The protoco
A Graph-Based Analysis of Comparability, Scale, and Attribution in Private Transformer Inference
Rising privacy concerns around large language models have accelerated research in private Transformer inference (PTI). S
Mission (Im)Possible: Towards Autonomous Discovery of Autopilot Logic Flaws in Open-Source Drone Frameworks
Autonomous drones are increasingly deployed in safety-critical tasks, yet their autopilot software can still contain sub
What You Sign Is Not What You Run: The Verifiability Gap in Quantized LLM Supply Chains
Model signing authenticates the full-precision weights W an LLM is released with, yet users run a quantized artifact Q w
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
cloud architecture assessment
cloud architecture assessment