13395 matches found
LASHED: LLMs and Static Hardware Analysis for Early Detection of RTL Bugs
While static analysis is useful in detecting early-stage hardware security bugs, its efficacy is limited because it requires information to form checks and is often unable to explain the security impact of a detected vulnerability. Large Language Models can be useful in filling these gaps by...
CVE-2021-29334
creationtimestamp| type| source ---|---|--- 2025-04-29 16:12:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13849...
MAL-2025-3540 Malicious code in webview-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 350de9d57836c502b1910805b2b6d9a4e1f5aad34e121671d5482c073889894a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in webview-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 350de9d57836c502b1910805b2b6d9a4e1f5aad34e121671d5482c073889894a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Security Bulletin: IBM QRadar SIEM is vulnerable to denial of service attack due to CVE-2021-39041
Summary The Common and TCPMultilineSyslog protocol components as used by IBM QRadar SIEM contain vulnerabilities which may allow for denial of service attacks. IBM has addressed the relevant CVE. Vulnerability Details CVEID:CVE-2021-39041 DESCRIPTION: IBM QRadar SIEM may be vulnerable to partial...
Secure Coding with AI, from Creation to Inspection
While prior studies have explored security in code generated by ChatGPT and other Large Language Models, they were conducted in controlled experimental settings and did not use code generated or provided from actual developer interactions. This paper not only examines the security of code generat...
SecRepoBench: Benchmarking LLMs for Secure Code Generation in Real-World Repositories
This paper introduces SecRepoBench, a benchmark to evaluate LLMs on secure code generation in real-world repositories. SecRepoBench has 318 code generation tasks in 27 C/C++ repositories, covering 15 CWEs. We evaluate 19 state-of-the-art LLMs using our benchmark and find that the models struggle...
CVE-2025-2300
Hitachi Ops Center Common Services within Hitachi Ops Center OVA contains an information exposure vulnerability. This issue affects Hitachi Ops Center Common Services: from 11.0.3-00 before 11.0.4-00...
CVE-2025-46613
OpenPLC 3 through 64f9c11 has server.cpp Memory Corruption because a thread may access handleConnections arguments after the parent stack frame becomes unavailable...
GHSA-F46R-RW29-R322
creationtimestamp| type| source ---|---|--- 2025-04-25 01:10:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13367 2025-04-25 03:30:33+00:00| published-proof-of-concept| Telegram/oGnFJdmXUCqYx0xYR0D8dpnhpl9VxD3P3IPRWVfgfpPSsY...
Ubuntu: Security Advisory (USN-7463-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-45643
creationtimestamp| type| source ---|---|--- 2025-04-24 14:05:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13236...
CVE-2025-27580
NIH BRICS aka Biomedical Research Informatics Computing System through 14.0.0-67 generates predictable tokens that depend on username, time, and the fixed 7Dl9dj- string and thus allows unauthenticated users with a Common Access Card CAC to escalate privileges and compromise any account, includin...
CVE-2025-27580
NIH BRICS aka Biomedical Research Informatics Computing System through 14.0.0-67 generates predictable tokens that depend on username, time, and the fixed 7Dl9dj- string and thus allows unauthenticated users with a Common Access Card CAC to escalate privileges and compromise any account, includin...
Ubuntu: Security Advisory (USN-7450-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-21008
creationtimestamp| type| source ---|---|--- 2025-04-23 20:04:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13142...
CVE-2025-28017
TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...
CVE-2022-36018
creationtimestamp| type| source ---|---|--- 2025-04-23 17:04:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13073...