EUVD-2025-7789

Malicious code in bioql PyPI...

EUVD-2024-41413

Malicious code in bioql PyPI...

EUVD-2022-41844

Malicious code in bioql PyPI...

EUVD-2024-37147

Malicious code in bioql PyPI...

EUVD-2024-2111

Malicious code in bioql PyPI...

EUVD-2024-36612

Malicious code in bioql PyPI...

EUVD-2023-50083

Malicious code in bioql PyPI...

EUVD-2025-3169

Malicious code in bioql PyPI...

EUVD-2023-31259

Malicious code in bioql PyPI...

Explainable but Vulnerable: Adversarial Attacks on XAI Explanation in Cybersecurity Applications

Explainable Artificial Intelligence XAI has aided machine learning ML researchers with the power of scrutinizing the decisions of the black-box models. XAI methods enable looking deep inside the models' behavior, eventually generating explanations along with a perceived trust and transparency...

CVE-2025-56019

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 health monitoring device. The flaw allows unauthorized mobile applications to establish a connection via Bluetooth Low Energy (BLE) without authentication. Once an unauthorized connection is secured, legitimate ap...

SUSE CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

UBUNTU-CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

gauntlt

This is an offensive tool for web application security testing. It is a ruggedization framework that enables security testing that is usable by devs, ops, and security. The tool is called Gauntlt. The target product/service or framework is not explicitly stated, but based on the examples provided...

The vulnerability of the NetworkPkg/IScsiDxe/IScsiProto.c component in the development environment for UEFI applications in EDK2 allows a attacker to compromise data integrity and cause service failures.

The vulnerability of the NetworkPkg/IScsiDxe/IScsiProto.c component in the UEFI applications of EDK2 development environment is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

NVIDIA CUDA Toolkit Heap Buffer Overflow Vulnerability (CNVD-2025-23250)

NVIDIA CUDA Toolkit is a development software application for creating high-performance GPU-accelerated applications from NVIDIA. NVIDIA CUDA Toolkit suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause arbitrary code execution...

DEBIAN-CVE-2025-11021

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in...

xss.yaml

It is an offensive tool for web application security testing. Th...

CVE-2025-9965: Improper Authentication

Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...