2026-10-18 归档

今日共收录 723 条安全情报,包含 0 个 CVE,397 篇安全通告,以及 78 篇研究论文。

← 返回归档列表
安全公告2026-10-18 发布INFO

@AndroidDev on X

@AndroidDev on X

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-10-18 发布INFO

Android Help Center

Android Help Center

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-10-18 发布INFO

www.android.com

www.android.com

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-10-18 发布INFO

Google Mobile Services

Google Mobile Services

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-10-18 发布INFO

MFSA 2026-105Security Vulnerabilities fixed in Firefox for iOS 157.1

MFSA 2026-105Security Vulnerabilities fixed in Firefox for iOS 157.1

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-10-18 发布INFO

【大模型服务平台 TokenHub】& 【云开发 CloudBase】 关于腾讯云 MiniMax-M2.7 模型下线及切换升级的通知

【大模型服务平台 TokenHub】& 【云开发 CloudBase】 关于腾讯云 MiniMax-M2.7 模型下线及切换升级的通知

历史摘要 · 未重新核验 · 腾讯云安全公告

威胁情报2026-10-18 发布INFO

Firewall for AI

Firewall for AI

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-10-18 发布INFO

[原创]从 REA 的 19 万 Star 说起 — AI 逆向的能力边界与攻防趋势

[原创]从 REA 的 19 万 Star 说起 — AI 逆向的能力边界与攻防趋势

历史摘要 · 未重新核验 · 看雪

安全公告2026-10-17 发布INFO

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2...

CVE-2026-111933

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration v

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113...

CVE-2026-111926

Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest h

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn...

CVE-2026-111911

phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that...

CVE-2026-111904

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that allows unauthenticated atta

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its...

CVE-2026-111895

phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID logi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that...

CVE-2026-111898

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to tak

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication...

CVE-2026-111882

phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`

CVE-2026-96628

## Summary Arcane v2.10.2 contains an authorization inconsistency in `AuthMiddleware.managerAuth`. When a request supp

历史摘要 · 未重新核验 · GitHub Advisory

学术论文2026-10-15 发布INFO

Private Retrieval Augmented Generation via Random Projection

Retrieval-Augmented Generation (RAG) enhances the capabilities of large language models (LLMs) by querying external stru

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-15 发布INFO

Poisoning the Neighborhood: A Topology-Aware Topic-Level Attack on Large-Scale HNSW-based RAG Systems

Retrieval-augmented generation (RAG) mitigates hallucinations and knowledge staleness in large language models using ext

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-15 发布INFO

From One Query to Many: A Critical Survey of Privacy Accounting in RAG

Retrieval-augmented generation (RAG) enables large language models to leverage external knowledge but introduces privacy

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-15 发布INFO

Approve What, Exactly? Effect Binding and Trusted Rendering for Agent Step-Up Authorization

AI agents now pause for approval before they send money, delete files or email outsiders, and that approval is usually t

历史摘要 · 未重新核验 · arXiv cs.CR