YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager:...
CVE-2026-116826
YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that all
2026-10-27 归档
今日共收录 787 条安全情报，包含 0 个 CVE，405 篇安全通告，以及 97 篇研究论文。
← 返回归档列表A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this...
CVE-2026-116508
A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function su
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2...
CVE-2026-86991
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS
An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS...
CVE-2026-86987
An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2.
An authorization issue was addressed with improved state management. This issue is fixed in iOS...
CVE-2026-86989
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and...
CVE-2026-86992
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and
CoSA: The Conflict of Skills Attack in Real-World LLM Agent Ecosystems
Agent Skills allow LLM agents to combine reusable capabilities, but checking each Skill in isolation cannot rule out pol
LLM WikiLeaks: Uncovering URL-Based Capability Extension and Security Circumvention in Agentic Message Boards
Autonomous agents have been observed acting beyond their assigned tasks, accessing unauthorized systems, and establishin
Factual Yet One-Sided: Stance Poisoning and Evidence Balancing in Retrieval-Augmented Generation
The stance expressed in responses from retrieval-augmented generation systems is significantly influenced by the stance
EdgeDeID: A 0.6B Clinical De-identifier Trained Without Real Patient Data
De-identifying clinical notes with a hosted language model discloses the information the step is meant to protect. We pr
Trust Mechanisms for Offline Generative AI at the Edge: A Connectivity-Regime Framework and an Empirical Study on a Raspberry Pi 5
Generative AI and large language models (LLMs) are moving into the Internet of Things, yet most deployments assume cloud
ProbeID: Verifying MCP Tool Identity for LLM Agents under Registry Drift
Agents select tools by copyable descriptions, which cannot establish which implementation runs. ProbeID compares canonic
Secure and Functional Code Generation with Self-Evaluation
Large Language Models (LLMs) can generate functionally correct code that remains insecure. Security-focused fine-tuning
Cloud & Application Security
Cloud & Application Security
Next-Gen Identity Security
Next-Gen Identity Security
cloud architecture assessment
cloud architecture assessment
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud