Posts of last 24 hours
很多顶尖 AI 初创公司都宣称他们的技术将能彻底改变软件开发、药物研发和科学研究，但他们很少用论文去论证他们的宣传。根据发表在 bioRxiv 上的一篇论文预印本，逾半数 AI 独角兽企业
https://buaq.net/go-431828.html
Связки нейросетей превзошли отдельные модели в тесте CyberGym и помогли сократить стоимость анализа кода.
https://www.securitylab.ru/news/575446.php
涉宣扬恐怖主义内容澳洲起诉Telegram澳大利亚监管机构周四表示，已对即时通讯平台Telegram启动法律行动，指控其未能处理支持恐怖主义的帖子。电子安全专员办公室称，在Telegram未能删除恐怖
https://buaq.net/go-431826.html
A vulnerability was found in Oracle PeopleSoft Enterprise CS Student Records 9.2.38 and classified as critical. This issue affects some unknown processing of the component Research Tracking. Executing a manipulation can lead to privilege escalation.
This vulnerability is handled as CVE-2026-60598. The attack can be executed remotely. There is not any exploit available.
https://vuldb.com/vuln/381617
A vulnerability was found in Oracle PeopleSoft Enterprise CS Student Financials 9.2.38. It has been classified as critical. Impacted is an unknown function of the component Billing. The manipulation leads to improper privilege management.
This vulnerability is uniquely identified as CVE-2026-60602. The attack is possible to be carried out remotely. No exploit exists.
https://vuldb.com/vuln/381618
A vulnerability, which was classified as critical, was found in Oracle PeopleSoft Enterprise CS Student Records 9.2.38. Impacted is an unknown function of the component Research Tracking. Executing a manipulation can lead to improper authorization.
This vulnerability appears as CVE-2026-60599. The attack may be performed from remote. There is no available exploit.
https://vuldb.com/vuln/381629
A vulnerability was found in GitLab up to 19.0.4/19.1.2/19.2.0. It has been rated as problematic. Impacted is an unknown function. Performing a manipulation results in improper access controls.
This vulnerability is cataloged as CVE-2026-6267. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is advised.
https://vuldb.com/vuln/384280
A vulnerability classified as critical was found in BuddyPress Plugin up to 14.5.0 on WordPress. Affected by this issue is the function bp_unserialize_profile_field. Such manipulation leads to deserialization.
This vulnerability is referenced as CVE-2026-1360. It is possible to launch the attack remotely. No exploit is available.
https://vuldb.com/vuln/384441
A vulnerability has been found in Admin and Site Enhancements Pro Plugin up to 8.9.0 on WordPress and classified as critical. This issue affects the function recursive_html of the component Save Handler. The manipulation of the argument cfgroup/input leads to code injection.
This vulnerability is listed as CVE-2026-16610. The attack may be initiated remotely. There is no available exploit.
https://vuldb.com/vuln/384444
A vulnerability was found in FleekDash V2 Plugin up to 2.6.2.2 on WordPress. It has been classified as critical. The affected element is an unknown function of the file /wp-json/fleekdash/v1/register. This manipulation causes authorization bypass.
This vulnerability is registered as CVE-2026-14356. Remote exploitation of the attack is possible. No exploit is available.
https://vuldb.com/vuln/384446