aspect-based-sentiment-analysis (2.0.2), docly (>=0.0.4, <=0.2.1) +2 more potentially affected by CVE-2025-14927 via transformers (2.5.0)

transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aspect-based-sentiment-analysis 2.0.2 - docly =0.0.4, =0.0.7b0, =0.1.9, =0.1.18 Source cves: CVE-2025-14927 Source advisory:...

allennlp (>=0.9.1.dev20200415, <=1.0.0rc4.dev20200511), allennlp-models (>=1.0.0rc2, <=1.0.0rc3) +6 more potentially affected by CVE-2025-14921 via transformers (2.8.0)

transformers PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200415, =1.0.0rc2, =0.1.9, =0.0.2, =0.1.0, =0.3.2 Source cves: CVE-2025-14921 Source advisory: OSV:PYSEC-2025-212...

On the Effectiveness of Instruction-Tuning Local LLMs for Identifying Software Vulnerabilities

Large Language Models LLMs show significant promise in automating software vulnerability analysis, a critical task given the impact of security failure of modern software systems. However, current approaches in using LLMs to automate vulnerability analysis mostly rely on using online API-based LL...

Power Side-Channel Analysis of the CVA6 RISC-V Core at the RTL Level Using VeriSide

Security in modern RISC-V processors demands more than functional correctness: It requires resilience to side-channel attacks. This paper evaluates the vulnerability of the side channel of the CVA6 RISC-V core by analyzing software-based AES encryption uses an RTL-level power profiling framework...

Satellite Cybersecurity across Orbital Altitudes: Analyzing Ground-Based Threats to LEO, MEO, and GEO

The rapid proliferation of satellite constellations, particularly in Low Earth Orbit LEO, has fundamentally altered the global space infrastructure, shifting the risk landscape from purely kinetic collisions to complex cyber-physical threats. While traditional safety frameworks focus on debris...

MAL-2025-192687 Malicious code in commander-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fe1eb016adcd74c343cd1628168fca4112c383c79d2e8580aa81b80a3d162f The package commander-stable was found to contain malicious code. Source: ghsa-malware d960435ff1d49dae38d3390836ed2ea98d8952b423ab906c750127f7c6bc02...

ReGAIN: Retrieval-Grounded AI Framework for Network Traffic Analysis

Modern networks generate vast, heterogeneous traffic that must be continuously analyzed for security and performance. Traditional network traffic analysis systems, whether rule-based or machine learning-driven, often suffer from high false positives and lack interpretability, limiting analyst...

tcpdump extractSlice Function DoS

The vulnerability of the extractSlice function in the tcpdump network traffic analysis software relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

MAL-2025-192678 Malicious code in jest-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02daf523039c3df603f4e65bf270eab31b72c3d891d9be87a53c99c77950bfa The package jest-stable was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192677 Malicious code in shakti20261 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a217c3c91ff80edbc760c82358d7d22c5819f0110ccf221e4d3639eb22e08ac7 The package shakti20261 was found to contain malicious code. Source: ghsa-malware e75357912e9e470657d646a2fd23a82c2f23cd2a6d0a987fb5b880eb8fa4c731 An...

Exploit for Deserialization of Untrusted Data in Facebook React

RSC Detector - React Server Components Vulnerability Scanner...

EUVD-2025-204537

Turms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in the administrator authentication system. The BaseAdminService class caches administrator passwords in plaintext within AdminInfo objects to optimize authentication performance. Upon successful login,...

MAD-OOD: A Deep Learning Cluster-Driven Framework for an Out-Of-Distribution Malware Detection and Classification

Out of distribution OOD detection remains a critical challenge in malware classification due to the substantial intra family variability introduced by polymorphic and metamorphic malware variants. Most existing deep learning based malware detectors rely on closed world assumptions and fail to...

GRAudit Grep Auditing Tool 4.0

Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility, grep. It's comparable to other static analysis applications like RATS, SWAAT, and flaw-finder while keeping the technical requirements to a minimum and being very...

org.elasticsearch.test:framework (>=9.2.0, <=9.2.1), org.elasticsearch.test:yaml-rest-runner (>=9.2.0, <=9.2.1) +1 more potentially affected by CVE-2025-68390 via org.elasticsearch:elasticsearch (>=9.2.0, <=9.2.1)

org.elasticsearch:elasticsearch MAVEN version =9.2.0, =9.2.0, =9.2.0, =9.2.1 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.2.1 Source cves: CVE-2025-68390 Source advisory: MEND:CVE-2025-68390...

fantasy-analysis (>=0.0.0, <=0.0.3), hc-nlp (>=0.1.0, <=0.2.0) +1 more potentially affected by CVE-2025-53000 via nbconvert (6.4.4)

nbconvert PYPI version 6.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - fantasy-analysis =0.0.0, =0.1.0, =2.4.0, =8.2.0 Source cves: CVE-2025-53000 Source advisory: OSV:GHSA-XM59-RQC7-HHVF...

omolab-conf-analysis (>=0.0.1, <=0.0.2) potentially affected by CVE-2025-53000 via nbconvert (6.0.4)

nbconvert PYPI version 6.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - omolab-conf-analysis =0.0.1, =0.0.2 Source cves: CVE-2025-53000 Source advisory: OSV:GHSA-XM59-RQC7-HHVF...

MAL-2025-192606 Malicious code in sarumaan_a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f1d6e1dae6e429d4b5cffe6573928f3e9f5f816a3676747d786bce3c32d175 The package sarumaana was found to contain malicious code. Source: ossf-package-analysis...

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electrics Products

RISK EVALUATION Successful exploitation of this vulnerability could result in denial-of-service DoS, information tampering, and information disclosure. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:...

Security Risks of Agentic Vehicles: A Systematic Analysis of Cognitive and Cross-Layer Threats

Agentic AI is increasingly being explored and introduced in both manually driven and autonomous vehicles, leading to the notion of Agentic Vehicles AgVs, with capabilities such as memory-based personalization, goal interpretation, strategic reasoning, and tool-mediated assistance. While framework...