Decentralized Medical Data Sharing with Off-chain Storage and View-based Access Control
Recently, many blockchain-based medical data sharing systems using off-chain storage have been proposed. However, these
2026-10-28 归档
今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。
← 返回归档列表NameTrap: Steering AI Coding Agents Toward Security Vulnerabilities via Variable Names
AI coding agents routinely clone repositories, install packages, and read source code obtained from the Web, so publicly
HNSecW: A Logarithmic-Time MPC Protocol for Approximate Nearest Neighbor Search
As a core component of modern RAG systems, approximate nearest neighbor (ANN) search has been extensively studied for de
The Policies of Programming Language Ecosystems: A "Qualitative" Analysis
Programming language ecosystems (PLEs), such as CRAN for R, have greatly accelerated software reuse. At the same time, t
BE-CTDE: Blockchain-Enabled Multi-Agent Reinforcement Learning with Anomaly Detection and Token Economics
Multi-agent reinforcement learning supports cooperative decision-making in Internet of Things systems, but strategic dev
Securing Agent-Generated Code with Its Own Development History
Pull requests written by coding agents can pass a project's test suite while omitting a guard or a validation step. To f
Back to Basics: Formal Analysis Hints Improve Weak-to-Strong Monitoring
Frontier agentic systems are capable of taking misaligned actions that may cause significant harm. Monitoring techniques
Ranking Is Not Deciding: Benchmark Shortcuts and Operating-Point Collapse in Query-Time RAG Poisoning Defenses
Query-time filters that screen each retrieved document before it reaches the generator are the dominant published defens
The Product Designer for WooCommerce WordPress | Lumise plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.2 via the process_che...
CVE-2026-15323
The Product Designer for WooCommerce WordPress | Lumise plugin for WordPress is vulnerable to Directory Traversal in all
The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not sanitize and cast a block and shortcode attribute before concatenating it into SQL queries, allowing authentic...
CVE-2026-115281
The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not sanitize and cast a block and shortcode attribute bef
The WP Roster WordPress plugin before 2.35 does not perform any capability or nonce checks on one of its AJAX actions, allowing unauthenticated attackers to delete the WordPress...
CVE-2026-115255
The WP Roster WordPress plugin before 2.35 does not perform any capability or nonce checks on one of its AJAX actions, a
The Customer Engagement System WordPress plugin before 2.0.2 does not restrict access to its MailChimp interest-group lookup or validate the API key supplied to it, allowing un...
CVE-2026-115225
The Customer Engagement System WordPress plugin before 2.0.2 does not restrict access to its MailChimp interest-group l
The Customer Engagement System WordPress plugin before 2.0.2 does not safely build the SQL statements that store a popup's page and category visibility rules, concatenating req...
CVE-2026-115224
The Customer Engagement System WordPress plugin before 2.0.2 does not safely build the SQL statements that store a popu
The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not perform any capability or ownership check on a set of unauthenticated AJAX actions that operate on ...
CVE-2026-113813
The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not perform any capability or ownership check
The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership check when rendering a listing referenced by an id attribute in its field shortcodes, ...
CVE-2026-113494
The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership check when rendering a listin
The GeoDirectory WordPress plugin before 2.8.196 does not properly escape a post badge shortcode attribute for a JavaScript context before placing it in an inline event handler...
CVE-2026-113488
The GeoDirectory WordPress plugin before 2.8.196 does not properly escape a post badge shortcode attribute for a JavaSc
The GeoDirectory WordPress plugin before 2.8.196 does not properly sanitise or escape a post badge click-through link value before outputting it in an anchor element on a listi...
CVE-2026-113487
The GeoDirectory WordPress plugin before 2.8.196 does not properly sanitise or escape a post badge click-through link v
The Media Library Assistant WordPress plugin before 3.42 does not verify a CSRF nonce on its Empty Trash media action, so a forged cross-site request can cause a logged-in user ...
CVE-2026-113486
The Media Library Assistant WordPress plugin before 3.42 does not verify a CSRF nonce on its Empty Trash media action, s
The Media Library Assistant WordPress plugin before 3.42 does not consistently validate its CSRF nonce on the Media Library bulk-action handler, checking the nonce only when its...
CVE-2026-113485
The Media Library Assistant WordPress plugin before 3.42 does not consistently validate its CSRF nonce on the Media Libr
The MP3 Audio Player WordPress plugin before 5.16 does not escape one of its audio player shortcode attributes before outputting it into an HTML attribute, allowing users with ...
CVE-2026-111967
The MP3 Audio Player WordPress plugin before 5.16 does not escape one of its audio player shortcode attributes before o