110 matches found
valkey-bloom 输入验证错误漏洞
Valkey-Bloom is a Valkey open-source module. Valkey-Bloom has a vulnerability related to input validation errors. This vulnerability arises from the lack of a flag to handle RDB parsing errors, which may allow a specially crafted RESTORE command to trigger an assertion that causes the server to...
PT-2026-21584
Valkey-Bloom is a Rust based Valkey module which brings a Bloom Filter Module data type into the Valkey distributed key-value database. Prior to commit a68614b6e3845777d383b3a513cedcc08b3b7ccd, a specially crafted RESTORE command can cause Valkey to hit an assertion, causes the server to shutdown...
Assessing the Software Security Comprehension of Large Language Models
Large language models LLMs are increasingly used in software development, but their level of software security expertise remains unclear. This work systematically evaluates the security comprehension of five leading LLMs: GPT-4o-Mini, GPT-5-Mini, Gemini-2.5-Flash, Llama-3.1, and Qwen-2.5, using...
Malicious code in pixel-bloom (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8b2781d37ee1adef96e13bb9b91bbf543cf9536031d1b42f574ffc860b8922 The package pixel-bloom was found to contain malicious code...
MAL-2025-191580 Malicious code in pixel-bloom (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8b2781d37ee1adef96e13bb9b91bbf543cf9536031d1b42f574ffc860b8922 The package pixel-bloom was found to contain malicious code...
Malicious Package
Overview pixel-bloom is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package. Once...
EUVD-2025-199327
Malicious code in @commute/bloom npm...
Malicious code in @commute/bloom (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a8d3f37c021b587ff0a29256071f77c00a9cd9c0ac896a95eadefc849dba2f The package @commute/bloom was found to contain malicious code. Source: ghsa-malware f0fc74d77b27b5b9dd2fea4b44706142694d54536db65dad741286d4c1653ca3...
MAL-2025-191207 Malicious code in @commute/bloom (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a8d3f37c021b587ff0a29256071f77c00a9cd9c0ac896a95eadefc849dba2f The package @commute/bloom was found to contain malicious code. Source: ghsa-malware f0fc74d77b27b5b9dd2fea4b44706142694d54536db65dad741286d4c1653ca3...
EUVD-2016-1994
Malware in sbrugna...
EUVD-2013-5537
Malware in sbrugna...
EUVD-2023-0456
Malicious code in bioql PyPI...
MAL-2025-43515 Malicious code in aroma_cnqff_npir4_bloom (npm)
The package aromacnqffnpir4bloom was found to contain malicious code...
SUSE SLES15: tomcat10 / tomcat10-admin-webapps / tomcat10-doc / etc (SUSE-SU-2025:03006-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03006-1 advisory. Updated to Tomcat 10.1.44: - CVE-2025-48989: Fixed 'MadeYouReset' DoS in HTTP/2 due to client triggered stream reset bsc12438...
Security update for tomcat10
This update for tomcat10 fixes the following issues: Updated to Tomcat 10.1.44: CVE-2025-48989: Fixed "MadeYouReset" DoS in HTTP/2 due to client triggered stream reset bsc1243895 Other fixes: Catalina Fix: Fix bloom filter population for archive indexing when using a packed WAR containing one or...
Malicious code in aroma_7a5jh_i2iev_bloom (npm)
The package aroma7a5jhi2ievbloom was found to contain malicious code...
Malicious code in bloom-web (npm)
The package bloom-web was found to contain malicious code...
Malicious code in bloom-lang (npm)
The package bloom-lang was found to contain malicious code...