ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute
CVE-2026-115921
## Summary ONNX shape inference did not safely validate the required Scan `num_scan_inputs` attribute. Two malformed va
2026-10-29 归档
今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。
← 返回归档列表ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)
CVE-2026-115919
## Summary ONNX shape inference performed an out-of-bounds read when processing a malformed RNN, GRU, or LSTM node from
[原创]CVE-2020-6507利用链
CVE-2020-6507
[原创]CVE-2020-6507利用链
CVE-2026-39821：Go idna 纯 ASCII 标签解码漏报
CVE-2026-39821
CVE-2026-39821：Go idna 纯 ASCII 标签解码漏报
CVE-2026-6307：漏掉一次签名比较，Wasm 返回类型错乱
CVE-2026-6307
CVE-2026-6307：漏掉一次签名比较，Wasm 返回类型错乱
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
CVE-2026-101767
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), accord
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
CVE-2026-104351
Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploit
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
CVE-2026-35273
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together,
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
CVE-2026-111497
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Co
Hackers Start Probing Fresh Oracle EBS Vulnerability
CVE-2026-101767
CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution. The post Hackers St
Heads of Security: Learned Attention Gates Improve Prompt Injection Robustness
We introduce Heads of Security (HoS), a prompt injection defense that enforces instruction-data separation via a small s
Revisiting Privacy Risks in Quantized Deep Neural Networks
Model quantization has become a fundamental technique for enabling the efficient deployment of large-scale deep neural n
When POST Becomes GET: Investigating HTTP Method Interchangeability and Its Security Implications
HTTP method semantics are a common boundary between safe retrieval and state-changing operations; however, deployed web
Penny for Your Prompts: A Measurement Study of Contextual Leakage in AI Chat Platforms
AI chatbot platforms have become one of the most popular web interfaces users interact with online, routinely receiving
SecDMP: Provably Secure Data Memory-Dependent Prefetching (Extended Version)
Data memory-dependent prefetchers (DMPs) are a microarchitectural optimization recently introduced in mainstream desktop
Constraining the Commit Boundary: A DIO/ODI-Informed Authorization Guardrail for Agentic Entity Resolution
Agentic Entity Resolution (ER) systems iteratively plan actions, retrieve evidence, revise hypotheses, and propose graph
When Is a Relation Worth Trusting? Manipulation Costs, Exposure, and the Trust Trap in Multi-Relational Graph Learning
Multi-relational graph detectors learn from clean data how much to trust each relation, but an adversary pays a differen
Asynchronous Verifiable and Complete Secret Sharing: From Design Patterns to System-Level Trade-offs
Modern secret sharing protocols promise robust secret sharing in fully asynchronous Byzantine systems, but their practic
GKS Fully Homomorphic Encryption: Security Analysis
All traditional encryption schemes share a fundamental operational vulnerability: encrypted data must be decrypted befor
Janus Vehicles: Entity-Centric Threat Modelling of Protocol-Conformant Vehicles under a Malicious-Manufacturer Assumption
Automotive cybersecurity commonly assumes benign end-product manufacturers and design authorities, focusing on supply-ch