server-set cookie erases cookie jar

CVE-2026-86412

server-set cookie erases cookie jar

历史摘要 · 未重新核验 · Microsoft MSRC

FTP connection reuse inherits client-certificate

CVE-2026-86411

FTP connection reuse inherits client-certificate

历史摘要 · 未重新核验 · Microsoft MSRC

Distrust compromised intermediate certificates in crypto/x509

CVE-2026-111943

Distrust compromised intermediate certificates in crypto/x509

历史摘要 · 未重新核验 · Microsoft MSRC

never-ending loop via server response omission

CVE-2026-92387

never-ending loop via server response omission

历史摘要 · 未重新核验 · Microsoft MSRC

redirect to SFTP or SCP bypasses host verification

CVE-2026-86410

redirect to SFTP or SCP bypasses host verification

历史摘要 · 未重新核验 · Microsoft MSRC

IMAP APPEND plus CRLF conversion command injection

CVE-2026-87864

IMAP APPEND plus CRLF conversion command injection

历史摘要 · 未重新核验 · Microsoft MSRC

leaking host credentials to HTTP proxy

CVE-2026-86414

leaking host credentials to HTTP proxy

历史摘要 · 未重新核验 · Microsoft MSRC

wolfSSL public-key pinning bypass

CVE-2026-87866

wolfSSL public-key pinning bypass

历史摘要 · 未重新核验 · Microsoft MSRC

HSTS response erases persisted entries

CVE-2026-87863

HSTS response erases persisted entries

历史摘要 · 未重新核验 · Microsoft MSRC

curl_mime_free stack overflow by recursion

CVE-2026-92391

curl_mime_free stack overflow by recursion

历史摘要 · 未重新核验 · Microsoft MSRC

FastMCP: Post-transform component authorization is skipped on direct calls

## Maintainer assessment and remediation This report is accepted as a FastMCP authorization vulnerability. In supported

历史摘要 · 未重新核验 · GitHub Advisory

gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()

## Summary In the `gix` crate, `Cache::protect_options()` in `gix/src/config/cache/access.rs` reads the three filesyste

历史摘要 · 未重新核验 · GitHub Advisory

Echo: X-Real-IP extractor trusts the header value instead of the sending peer

## Impact In Echo v5, `ExtractIPFromRealIPHeader` checked whether the address supplied in `X-Real-IP` belonged to a tru

历史摘要 · 未重新核验 · GitHub Advisory

Evolving Federated Density Peak Clustering with Shuffler-Based Anonymization

In this paper, we present a novel one-shot federated clustering approach based on evolving fuzzy clustering and shuffler

历史摘要 · 未重新核验 · arXiv cs.CR

AIRO: A Streaming-Based Machine Learning Framework for Threat Detection and Security in Industrial Internet of Things

Modern Industrial Internet of Things (IIoT) im- plementations now connect edge gateways, cloud dashboards and business a

历史摘要 · 未重新核验 · arXiv cs.CR

FVQKD: A Formal Verification of Quantum Key Distribution Security in Rocq

Quantum key distribution (QKD), whose security is derived from quantum mechanics rather than computational assumptions,

历史摘要 · 未重新核验 · arXiv cs.CR

DLT Terms 100: a learner's glossary based on ISO 22739:2024

We propose ``DLT Terms 100'' aimed at improving literacy regarding blockchain (distributed ledger technology: DLT). The

历史摘要 · 未重新核验 · arXiv cs.CR

The Psychology of an AI Hacker

Human hackers rely on composure, persistence, vigilance, and confidence under pressure. We investigate whether analogous

历史摘要 · 未重新核验 · arXiv cs.CR

Parameters efficient language model with latent cross-attention for IoT intrusion detection

Language models have shown strong potential for intrusion detection, but their high memory and computational demands mak

历史摘要 · 未重新核验 · arXiv cs.CR

MASAR: Multi-stage Attack Surface Analysis and Reasoning Framework for Telecom Networks

The increasing complexity of modern telecommunications networks introduces security challenges that require systematic t

历史摘要 · 未重新核验 · arXiv cs.CR