16120 matches found
Security Bulletin: IBM Operations Analytics - Log Analysis is affected by CSRF Token Replay Attack
Summary IBM Operations Analytics – Log Analysis uses CSRF tokens to prevent unauthorised actions from being performed by an attacker on behalf of an authenticated user. CVE-2024-40685. Vulnerability Details CVEID:CVE-2024-40685 DESCRIPTION: IBM SmartCloud Analytics - Log Analysis is vulnerable to...
RedBench: A Universal Dataset for Comprehensive Red Teaming of Large Language Models
As large language models LLMs become integral to safety-critical applications, ensuring their robustness against adversarial prompts is paramount. However, existing red teaming datasets suffer from inconsistent risk categorizations, limited domain coverage, and outdated evaluations, hindering...
AutoVulnPHP: LLM-Powered Two-Stage PHP Vulnerability Detection and Automated Localization
PHP's dominance in web development is undermined by security challenges: static analysis lacks semantic depth, causing high false positives; dynamic analysis is computationally expensive; and automated vulnerability localization suffers from coarse granularity and imprecise context. Additionally,...
Finite-Size Security of QKD: Comparison of Three Proof Techniques
We compare three proof techniques for composable finite-size security of quantum key distribution under collective attacks, with emphasis on how the resulting secret-key rates behave at practically relevant block lengths. As a benchmark, we consider the BB84 protocol and evaluate finite-size...
MalwareAnalysisProject
MalwareAnalysisProject Introduction to exploit development wit...
Exploit for CVE-2020-98765
FirmwareForge - Advanced Firmware & Hardware Exploitation Tool...
Exploit for Off-by-one Error in Sudo_Project Sudo
ExploitForge - AI-Powered Automatic Exploit Generation !Pyt...
ai-talks (>=0.8.8, <=0.8.997), autoviz (>=0.1.25, <=0.1.37) +11 more potentially affected by CVE-2026-21883 via bokeh (2.4.2)
bokeh PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - ai-talks =0.8.8, =0.1.25, =0.2.2, =0.0.0, =0.1.0, =0.0.4, =0.0.10, =0.9.0, =0.0.1, =0.29.0, =2.0.0.dev0, =2.3.2 Source cves: CVE-2026-21883 Source...
anomalydetection (0.0.0.dev1), cdci-data-analysis (>=1.3.1, <=1.3.2) potentially affected by CVE-2026-21883 via bokeh (0.12.16)
bokeh PYPI version 0.12.16 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - anomalydetection 0.0.0.dev1 - cdci-data-analysis =1.3.1, =1.3.2 Source cves: CVE-2026-21883 Source advisory: OSV:GHSA-793V-589G-574V...
Security Bulletin: Due to use of servlet feature in IBM WebSphere Application Server Liberty, IBM Operations Analytics - Log Analysis is affected by a security bypass vulnerability
Summary servlet feature in IBM WebSphere Application Server Liberty is used by IBM Operations Analytics - Log Analysis as part of HTTP Servlets support. CVE-2024-56339. Vulnerability Details CVEID:CVE-2024-56339 DESCRIPTION: IBM WebSphere Application Server 9.0 and WebSphere Application Server...
Security Bulletin: IBM Operations Analytics - Log Analysis is affected by incorrect validation of integrity check due to OpenSSH
Summary OpenSSH is used by IBM Operations Analytics - Log Analysis as part of implementations of SSH servers and clients. CVE-2023-48795. Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other...
Security Bulletin: IBM Operations Analytics - Log Analysis is affected by SMTP injection due to Jakarta Mail in IBM WebSphere Application Server Liberty
Summary Jakarta Mail in IBM WebSphere Application Server Liberty is used by IBM Operations Analytics - Log Analysis as part of sending and receiving emails. CVE-2025-7962. Vulnerability Details CVEID:CVE-2025-7962 DESCRIPTION: In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by...
Security Bulletin: Due to use of Apache Kafka, IBM Operations Analytics - Log Analysis is affected by remote code execution and denial of service.
Summary Apache Kafka in Logstash is used by IBM Operations Analytics - Log Analysis for high-throughput, fault-tolerant, and scalable data processing. CVE-2025-27819, CVE-2025-27818. Vulnerability Details CVEID:CVE-2025-27819 DESCRIPTION: In CVE-2023-25194, we announced the RCE/Denial of service...
Security Bulletin: IBM Operations Analytics - Log Analysis is affected by incorrect authorisation and XML external entity (XXE) vulnerabilities due to Apache Solr.
Summary Apache Solr is used by IBM Operations Analytics - Log Analysis as part of managing Solr collection and arbitary local file. CVE-2018-11802, CVE-2018-1308. Vulnerability Details CVEID:CVE-2018-11802 DESCRIPTION: In Apache Solr, the cluster can be partitioned into multiple collections and...
Security Bulletin: IBM Operations Analytics - Log Analysis is affected by improper access control and integer truncation issues due to flaw in Apache Xalan
Summary Apache Xalan in Logstash is used by IBM Operations Analytics - Log Analysis as part of the data transformation and integration. CVE-2014-0107, CVE-2022-34169. Vulnerability Details CVEID:CVE-2014-0107 DESCRIPTION: The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly...
Security Bulletin: Due to crypto.js in IBM WebSphere Application Server Liberty, IBM Operations Analytics - Log Analysis is affected by weaker than expected security
Summary crypto.js in IBM WebSphere Application Server Liberty is used by IBM Operations Analytics - Log Analysis is use to generate random numbers necessary for cryptographic operations. CVE-2020-36732. Vulnerability Details CVEID:CVE-2020-36732 DESCRIPTION: The crypto-js package before 3.2.1 for...
CryptoLib Heap Buffer Overflow DoS
The vulnerability of the CryptoTCPrepAAD function in the CryptoLib library is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
MAL-2026-57 Malicious code in react-transition-group-legacy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766e17e75d1b6492251c7c647d0783879b9fb18f0793046fc985e40a46295d63 The package react-transition-group-legacy was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in react-transition-group-legacy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766e17e75d1b6492251c7c647d0783879b9fb18f0793046fc985e40a46295d63 The package react-transition-group-legacy was found to contain malicious code. Source: ossf-package-analysis...