2026-10-30 归档

今日共收录 1854 条安全情报,包含 1458 个 CVE,156 篇安全通告,以及 125 篇研究论文。

← 返回归档列表
学术论文2026-10-27 发布INFO

UniPCH: A Unified Framework for Cross-Chain Payments via Payment Channel Hubs

Payment channel hubs (PCHs) enable private cross-chain payments, but existing protocols remain difficult to extend acros

来源摘录 · arXiv cs.CR

安全公告2026-10-29 发布INFO

sctp: revalidate output stream after association connect wait

CVE-2026-99165

sctp: revalidate output stream after association connect wait

来源摘录 · Microsoft MSRC

漏洞预警2026-10-13 发布CRITICAL

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could h...

CVE-2026-97229

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 1

来源摘录 · NVD / OSV.dev

学术论文2026-10-27 发布INFO

HqcLethe: Streaming HQC Encapsulation for Tiny Stateless Servers

Stateless post-quantum authenticated key exchanges such as post-quantum WireGuard hedge against unexpected cryptanalytic

来源摘录 · arXiv cs.CR

学术论文2026-10-27 发布INFO

An Empirical Study of Undisclosed Charges in Hook-Based Decentralized Exchanges

Many decentralized exchanges use automated market makers (AMMs) to trade assets against liquidity pools. Modern AMMs all

来源摘录 · arXiv cs.CR

学术论文2026-10-27 发布INFO

CASEL: Consequence-Aware Selective Execution for Reliable Long-Horizon Tool-Using Agents

Tool-using language agents increasingly modify external systems, yet most runtime safeguards allocate scrutiny by generi

来源摘录 · arXiv cs.CR

学术论文2026-10-27 发布INFO

FIDES-Live: Evaluating Behavioral Concordance in Sequential Trading Agents

Sequential trading agents produce decisions, orders, execution receipts, account states, and reports that need not agree

来源摘录 · arXiv cs.CR

学术论文2026-10-27 发布INFO

Split Federated Unlearning

Split federated learning (SFL) combines partitioned model execution with federated aggregation to support collaborative

来源摘录 · arXiv cs.CR

学术论文2026-10-26 发布INFO

ORBITAL: Optimization of Robust Brain--Computer Inference Through Architecture-Aware Low-Precision Compression

Compact electroencephalography (EEG) decoders enable embedded brain--computer interfaces (BCIs), but compression can alt

来源摘录 · arXiv cs.CR

漏洞预警2026-06-25 发布CRITICAL

Flowise before 3.0.6 contains an arbitrary file access vulnerability due to missing validation that the chatflowId and chatId parameters are UUIDs or numbers in file handling op...

CVE-2025-71334

Flowise before 3.0.6 contains an arbitrary file access vulnerability due to missing validation that the chatflowId and c

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83693

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-83517

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83519

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.

CVE-2026-83578

Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a netw

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83748

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.

CVE-2026-83523

Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-07-19 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Blamed commit moved the TIME_WAIT-derived IS...

CVE-2026-64024

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN

来源摘录 · NVD

安全公告2026-10-29 发布HIGH

Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset

## Summary An uncontrolled-resource-consumption vulnerability (CWE-400) in the Twisted HTTP/2 server lets any unauthent

来源摘录 · GitHub Advisory

威胁情报2026-10-29 发布INFO

IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment

IDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises. The

来源摘录 · Microsoft Threat Intelligence

威胁情报2026-10-29 发布INFO

IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases

Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increase

来源摘录 · Cisco Talos