Proof-Carrying Contracts: Commitments AI Agents Cannot Break
AI agents increasingly act on behalf of people or other agents, purchasing services, exchanging information and delegati
2026-10-23 归档
今日共收录 1236 条安全情报，包含 262 个 CVE，575 篇安全通告，以及 100 篇研究论文。
← 返回归档列表SPECTER: Covert Data Exfiltration from Air-Gapped Systems via USB Power Modulation
We present SPECTER, a post-compromise covert channel that uses host-side USB power control to exfiltrate information fro
On the Vulnerabilities and Data-Free Removal of Watermarks in Batch Normalization Layers
Batch Normalization (BN) layers have become a common choice for embedding white-box watermarks in Federated Learning (FL
Execution-Time Validation of Context-Carrying Action Intents in Industrial Cyber-Physical Systems
In industrial cells, commands from learned policies, operators and schedulers reach the controller after inference, conf
Post-quantum commutative group actions from oriented superspecial abelian varieties
We study the cryptographic use of Shimura class group actions on superspecial principally polarized abelian varieties eq
CyberHull: Deterministic Malicious URL Isolation via Convex Hull
The emergence of increasingly sophisticated and evasion-resistant phishing attack strategies represents a significant th
CAESAR: Mixed Reality Search-and-Rescue Platform for Cognitive Attack Evaluation
Mixed Reality (MR) enables immersive training by tightly coupling virtual content with the physical environment and supp
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerce Decoupled Checkout allows Object Injection. This issue affects Co...
CVE-2026-96378
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerce Decouple
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Allocation. This issue affects Combined image style versions: ...
CVE-2026-96377
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Alloc
Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud ve...
CVE-2026-96376
Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud
Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects Cloud versions: from 0.0.0 to 7.0.1.
CVE-2026-96375
Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue affects Project Browser versions: from 0.0.0 to 2.0.3, fr...
CVE-2026-96374
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue
Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.
CVE-2026-96373
Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f
Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.
CVE-2026-96372
Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.
CVE-2026-96371
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers
Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.
CVE-2026-96370
Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform v
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue aff...
CVE-2026-96369
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from...
CVE-2026-96368
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.
CVE-2026-96367
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers
Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.
CVE-2026-96366
Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f