DLT Terms 100: a learner's glossary based on ISO 22739:2024
We propose ``DLT Terms 100'' aimed at improving literacy regarding blockchain (distributed ledger technology: DLT). The
2026-10-23 归档
今日共收录 1236 条安全情报，包含 262 个 CVE，575 篇安全通告，以及 100 篇研究论文。
← 返回归档列表The Psychology of an AI Hacker
Human hackers rely on composure, persistence, vigilance, and confidence under pressure. We investigate whether analogous
Parameters efficient language model with latent cross-attention for IoT intrusion detection
Language models have shown strong potential for intrusion detection, but their high memory and computational demands mak
MASAR: Multi-stage Attack Surface Analysis and Reasoning Framework for Telecom Networks
The increasing complexity of modern telecommunications networks introduces security challenges that require systematic t
A Unified Evaluation Framework of Physical Adversarial Robustness in the Edge VLM Era
Recent advancements in Vision-Language Models (VLMs) enable end-to-end visual grounding via language prompts and generat
Regular Syndrome Decoding Is Easier Than Previously Estimated
The Regular Syndrome Decoding (RSD) problem is a structured variant of classical Syndrome Decoding and underlies a growi
Context-Aware Prompt Injection Detection via Small Language Models in RAG Pipelines: nokast-secureRAG
Local Retrieval-Augmented Generation (RAG) systems are vulnerable to indirect prompt injection and retrieval poisoning,
Latency-Neutral Passive Cyber Monitoring for Grid-Edge Operational Technology Networks
Deterministic industrial networks often present an operational trade-off between maintaining microsecond timing of prima
Testing TLS 1.3 PQC on constrained devices and microcontrollers
The UK, EU and US governments have set timelines for post-quantum cryptography migration of critical systems, with deadl
Make the Adversary Spend More Energy: Generative Deception against Language-Model Attackers in Critical Infrastructure
Language-model attackers consume computational resources as they explore and interact with a target, creating an opportu
Privacy Accounting for Empirical Denoisers
Diffusion models have emerged as the foundation of modern generative systems, yet their high memorization capacity raise
CVE-2026-114728
CVE-2026-114728
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling o
oretnom23 php-travel-agency-system Insertion insert.php sql injection
CVE-2026-114577
A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file adm
CVE-2026-114727
CVE-2026-114727
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing
CVE-2026-114726
CVE-2026-114726
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounc
CVE-2026-114725
CVE-2026-114725
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send
CVE-2026-114724
CVE-2026-114724
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserial
CVE-2026-114723
CVE-2026-114723
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thum
Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments
CVE-2026-114663
Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, beca
Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper
CVE-2026-114642
Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a client-connect