No description provided
CVE-2026-79862
No description provided
2026-10-23 归档
今日共收录 1236 条安全情报，包含 262 个 CVE，575 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Electron: Pointer lock permission requests can be attributed to the wrong frame
CVE-2026-113798
### Impact For `pointerLock` permission requests made from some cross-origin iframes, `session.setPermissionRequestHandl
Astro: Reflected/Stored XSS via unescaped <script>/<style> tag content in JSX/MDX rendering
CVE-2026-114128
## Summary Astro's JSX and MDX rendering pipeline treated string children of `` and `` elements as trusted HTML. When a
GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rule
CVE-2026-75507
### Summary The `OverlappingFieldsCanBeMerged` validation rule can be driven into quadratic — and in the worst case `O(
WildFakeToolBench: Benchmarking AI-Generated Image Detectors with Web-Sourced Image Processing
As AI generated images are getting popular these days, discussions on such generations are widely existed in current pub
Your Token Is Gone: A Token-Consumption Countermeasure for Disrupting LLM-Based Scam Systems
LLM-based scam systems increasingly combine adaptive dialogue, persistent context, external tools, and multi-agent coord
JANUS: Agentic Cross-Language Fuzzing Harness Generation for Android Native Libraries
Modern Android apps extensively rely on native libraries, bridging Java/Kotlin and C/C++ through the Java Native Interfa
PerMIT: Securing Persistent Memory for LLM Agents via Machine-Checked Integrity Theorems and Scalable Community Trust
Persistent memory is a largely undefended surface for injection and poisoning, and the same risk limits memory sharing a
A Unified Attack Framework against Statistical Generative Watermarks for Large Language Models
Watermarking has emerged as a key tool for identifying text generated by large language models (LLMs), with current sche
Cloud & Application Security
Cloud & Application Security
Next-Gen Identity Security
Next-Gen Identity Security
cloud architecture assessment
cloud architecture assessment
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms
CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
CrowdStrike Announces Agentic Identity Provider
CrowdStrike Announces Agentic Identity Provider
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense