CVE-2025-38368 misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()

In the Linux kernel, the following vulnerability has been resolved: misc: tps6594-pfsm: Add NULL pointer check in tps6594pfsmprobe The returned value, pfsm-miscdev.name, from devmkasprintf could be NULL. A pointer check is added to prevent potential NULL pointer dereference. This is similar to th...

MAL-2025-6231 Malicious code in bufbuild-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea2a6d8f75509bff2876bce466f00b9c7c810394f46e6479c6e2d8b19acc9557 The OpenSSF Package Analysis project identified 'bufbuild-core' @ 1.0...

MAL-2025-6321 Malicious code in ui-data-layer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8a48f1cd7920a46266b710e80c45543e765af5de9e2944c114bf249efe69ce17 The OpenSSF Package Analysis project identified 'ui-data-layer' @...

MAL-2025-6224 Malicious code in google-protobuf-conformance (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c56504427d8d150c02bac6d80c813025eafa11c3ed21419e5a3ce13a6c11ca6 Any computer that has this package installed or running should be considered...

MAL-2025-6227 Malicious code in react-is-builtin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ec8b0c72c247f12884f7dd1d983f39af01544eaefed640dec15bd838e4b3473d The OpenSSF Package Analysis project identified 'react-is-builtin' @...

iPhone vs. Android: iPhone users more reckless, less protected online

The smartphone wars have a winner, and it’s Android. No, this isn’t about which device has the best camera, the snappiest processor, or the flashiest AI features—this is about which device owners are safer online, and in many ways, it is Android users who take the crown. According to a new analys...

Mitsubishi Electric CNC Series (Update B)

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute malicious code by getting setup-launcher to load a malicious DLL. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...

MAL-2025-6222 Malicious code in ids-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f020e163d0a577209cc845c050e3c05d1227f790c1e49a6ed7acc1e0d7efae4c Any computer that has this package installed or running should be considered...

CVE-2025-53537

creationtimestamp| type| source ---|---|--- 2025-07-24 00:53:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luod2qveql2i 2025-10-10 06:46:36+00:00| seen| https://gist.github.com/Darkcrai86/7a8a46ebe032f3a5b6dc4800f88e9437...

Information Security Based on LLM Approaches: a Review

Information security is facing increasingly severe challenges, and traditional protection means are difficult to cope with complex and changing threats. In recent years, as an emerging intelligent technology, large language models LLMs have shown a broad application prospect in the field of...

PT-2025-30663 · Microsoft · Azure Virtual Machine

Name of the Vulnerable Software and Affected Versions: Azure Virtual Machines affected versions not specified Description: Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally. Recommendations: At the moment, there is no information about a...

Scout: Leveraging Large Language Models for Rapid Digital Evidence Discovery

Recent technological advancements and the prevalence of technology in day to day activities have caused a major increase in the likelihood of the involvement of digital evidence in more and more legal investigations. Consumer-grade hardware is growing more powerful, with expanding memory and...

CVE-2024-41751

IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 could allow a local, authenticated attacker to bypass client-side enforcement of security to manipulate data...

CVE-2024-41751

IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 could allow a local, authenticated attacker to bypass client-side enforcement of security to manipulate data...

CVE-2024-41750

IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 could allow a local, authenticated attacker to bypass client-side enforcement of security to manipulate data...

CVE-2024-40686

IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including...

CVE-2024-41750

CVE-2024-41750 affects IBM Operations Analytics - Log Analysis (versions 1.3.7.0 to 1.3.8.2). Root cause: client-side security enforcement can be bypassed, enabling a local, authenticated attacker to manipulate data by bypassing input/validation checks. The IBM Security Bulletin confirms a relate...

CVE-2024-40682

CVE-2024-40682 affects IBM Operations Analytics - Log Analysis. Affected versions are 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2. The vulnerability arises from improper validation of a specified input type, allowing a local user to cause a denial of service. IBM’s remediation advise...

CVE-2024-40682 IBM SmartCloud Analytics - Log Analysis denial of service

IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 could allow a local user to cause a denial of service due to improper validation of specified type of input...

CVE-2024-40686 IBM SmartCloud Analytics - Log Analysis HOST header injection

IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including...