12907 matches found
MAL-2025-3702 Malicious code in @cewe-phoenix-themes/default-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8fefa5fe5221477fe4ca130e84721255986e7b048f3e5922c99cac89d94df83 The OpenSSF Package Analysis project identified '@cewe-phoenix-themes/default-theme' @ 99.9.1 npm as malicious. It is considered malicious...
UBUNTU-CVE-2025-26842
An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog...
MAL-2025-3701 Malicious code in @walmart-dataventures/integrated-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6500cbbfb04c2cba829725a6851746577238ca39c724e4030421834285a958fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3700 Malicious code in airmason-employee (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f8954b40939c6627506907db7e85071941c5095c106f21463227c57f81020a8d The OpenSSF Package Analysis project identified 'airmason-employee' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Invariant-Based Cryptography
We propose a new symmetric cryptographic scheme based on functional invariants defined over discrete oscillatory functions with hidden parameters. The scheme encodes a secret integer through a four-point algebraic identity preserved under controlled parameterization. Security arises not from...
Integrating Communication, Sensing, and Security: Progress and Prospects of PLS in ISAC Systems
The sixth generation of wireless networks defined several key performance indicators KPIs for assessing its networks, mainly in terms of reliability, coverage, and sensing. In this regard, remarkable attention has been paid recently to the integrated sensing and communication ISAC paradigm as an...
Malicious code in antani-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc6ee4654a6ce0b1ac821dfabae9daec5d7ffc8149ea0fdb78a2230493cf4f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in yandex-lego (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36575d1c04d04a70393c42d013dfb94f94d1dd8211785aaa3b08414cdf0fb421 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-20954
Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability...
Malicious code in @ai-document-translation/ui-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c94ea05205ad6ac8c809be2fa22e18fae368f27f1f8bd34048528dc25daa90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-20977
Use of implicit intent for sensitive communication in translation in Samsung Notes prior to version 4.4.29.23 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability...
SUSE CVE-2022-49922
In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix potential memory leak in nfcmrvli2cncisend nfcmrvli2cncisend will be called by nfcmrvlncisend, and skb should be freed in nfcmrvli2cncisend. However, nfcmrvlncisend will only free skb when i2cmastersend return =...
PT-2025-20039 · Unknown · Enrichedcall
Name of the Vulnerable Software and Affected Versions: EnrichedCall versions prior to SMR May-2025 Release 1 Description: The issue concerns the use of implicit intent for sensitive communication in EnrichedCall, allowing local attackers to access sensitive information. User interaction is requir...
Avoid Using Uncommon Network Services
Some protocols are seldom used and their communities develop slowly. Therefore, related security issues cannot be quickly resolved. If these protocols are not disabled, attackers may exploit the protocols or code vulnerabilities to launch attacks. Stream Control Transmission Protocol SCTP is used...
Large Language Models Are Autonomous Cyber Defenders
Fast and effective incident response is essential to prevent adversarial cyberattacks. Autonomous Cyber Defense ACD aims to automate incident response through Artificial Intelligence AI agents that plan and execute actions. Most ACD approaches focus on single-agent scenarios and leverage...
CVE-2025-30165 Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration
vLLM is an inference and serving engine for large language models. In a multi-node vLLM deployment using the V0 engine, vLLM uses ZeroMQ for some multi-node communication purposes. The secondary vLLM hosts open a SUB ZeroMQ socket and connect to an XPUB socket on the primary vLLM host. When data ...
Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration
Affected Environments Note that this issue only affects the V0 engine, which has been off by default since v0.8.0. Further, the issue only applies to a deployment using tensor parallelism across multiple hosts, which we do not expect to be a common deployment pattern. Since V0 is has been off by...
Malicious code in testveriftest1asdlaaaa (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3b241cae62c005e3cd31a8251941ab101ebcca75aa4c8cb988905e87529339cd During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
