13271 matches found
MAL-2025-191983 Malicious code in elf-stats-nutmeg-chimney-245 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f39faacdb6a0a95dc4e8db69c27bc4a0e06a7b11ac0f6c48bf35d1667cfa1cf The package elf-stats-nutmeg-chimney-245 was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-191975 Malicious code in elf-stats-merry-cookiejar-987 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75fe8df281f1f2fce72e4cebd7dc37b97562bc7ca5bd5e5ac7da9d78d6e22cb1 The package elf-stats-merry-cookiejar-987 was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-191968 Malicious code in karemm7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb23140c87c50a27ae4e614762b9639f64ae2148777774915b5cd2ba94f104a0 The package karemm7 was found to contain malicious code. Source: ossf-package-analysis ea900c305547fbc90afe7dd06aac5431c244109fa63d688cb76e909cd3988f...
Malicious code in karemm3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd722766b62cd6170d4f383859a06e6a2a680b4a27dfad18580d867812e57c0 The package karemm3 was found to contain malicious code. Source: ossf-package-analysis f604c8fe5fbfae97b812b063b2707f681c1499484e959e7229a06227b1607b...
MAL-2025-191959 Malicious code in karem10 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ecf4d35a03a77c6c6665e814830b4111dd4c3e969a800697b3ca6dc0eeaebc The package karem10 was found to contain malicious code. Source: ossf-package-analysis d2bf23a7af43498c68b78f4d0e45aa2dec25a1ea950bc0c7b9b0d880ec35b9...
Malicious code in kkkaremn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be05818c3e6f94f41c611af1a16f1a88489f457de3d8b98cc9c4441eee9e557 The package kkkaremn was found to contain malicious code. Source: ossf-package-analysis...
A Comprehensive Study on the Impact of Vulnerable Dependencies on Open-Source Software
Open-source libraries are widely used by software developers to speed up the development of products, however, they can introduce security vulnerabilities, leading to incidents like Log4Shell. With the expanding usage of open-source libraries, it becomes even more imperative to comprehend and...
Primitive Vector Cipher(PVC): A Hybrid Encryption Scheme Based on the Vector Computational Diffie-Hellman (V-CDH) Problem
This work introduces the Primitive Vector Cipher PVC, a novel hybrid encryption scheme integrating matrix-based cryptography with advanced Diffie-Hellman key exchange. PVC's security is grounded on the established hardness of the Vector Computational Diffie- Hellman V-CDH problem. The two-layered...
📄 Microsoft Windows 11 Build 10.0.22631.6199 Advanced Admin Protection Bypass
This enhanced proof of concept exploit demonstrates an advanced method for bypassing Windows Administrator Protection by manipulating registry hives using both WinAPI and NTAPI. The code implements safe smart‑pointer wrappers for handles, secure SID management, deep registry enumeration, privileg...
Introducing Wiz SAST: Where Code Risk Meets Cloud Context
Modern code runs in complex and distributed cloud environments. Wiz SAST meets this complexity by correlating code flaws with real cloud context–including where workloads run, what they can access, and how exposed they are...
Malicious code in wfui-test-e2e (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f560542e2d2fa22d83add8cd46675e252d841fe3b08edfd847677a98547e86a7 The package wfui-test-e2e was found to contain malicious code. Source: ghsa-malware 3440ad1d2e090dbea33cc7a6b8e4cda047b6e20b31fc8bbd3d9e13b1f1758c56...
haproxy: denial of service vulnerability in HAProxy mjson library
A flaw was found in haproxy. A stemming from an inefficient algorithmic complexity issue within its bundled mjson parsing library. This vulnerability is triggered when haproxy is configured to analyze JSON content, such as with the jsonquery or jwtpayloadquery function...
haproxy: denial of service vulnerability in HAProxy mjson library
A flaw was found in haproxy. A stemming from an inefficient algorithmic complexity issue within its bundled mjson parsing library. This vulnerability is triggered when haproxy is configured to analyze JSON content, such as with the jsonquery or jwtpayloadquery function...
An Introductory Review of the Theory of Continuous-Variable Quantum Key Distribution: Fundamentals, Protocols, and Security
Continuous-variable quantum key distribution CV-QKD has emerged as a promising approach for secure quantum communication, offering advantages such as high key generation rates, compatibility with standard telecommunication infrastructure, and potential for integration on photonic chips. This revi...
CVE Breadcrumbs: Tracking Vulnerabilities through Versioned Apache Libraries
The Apache Software Foundation ASF ecosystem underpins a vast portion of modern software infrastructure, powering widely used components such as Log4j, Tomcat, and Struts. However, the ubiquity of these libraries has made them prime targets for high-impact security vulnerabilities, as illustrated...
AI-Driven Cybersecurity Testbed for Nuclear Infrastructure: Comprehensive Evaluation Using METL Operational Data
Advanced nuclear reactor systems face increasing cybersecurity threats as sophisticated attackers exploit cyber-physical interfaces to manipulate control systems while evading traditional IT security measures. This research presents a comprehensive evaluation of artificial intelligence approaches...
Hesperus Is Phosphorus: Mapping Threat Actor Naming Taxonomies at Scale
This paper studies the problem of Threat Actor TA naming convention inconsistency across leading Cyber Threat Intelligence CTI vendors. The current decentralized and proprietary nomenclature creates confusion and significant obstacles for researchers, including difficulties in integrating and...
MASCOT: Analyzing Malware Evolution through a Well-Curated Source Code Dataset
In recent years, the explosion of malware and extensive code reuse have formed complex evolutionary connections among malware specimens. The rapid pace of development makes it challenging for existing studies to characterize recent evolutionary trends. In addition, intuitive tools to untangle the...
Reverse Engineering and Control-Aware Security Analysis of the ArduPilot UAV Framework
Unmanned Aerial Vehicle UAV technologies are gaining high interest for many domains, which makes UAV security of utmost importance. ArduPilot is among the most widely used open-source autopilot UAV frameworks; yet, many studies demonstrate the vulnerabilities affecting such systems. Vulnerabiliti...
