Debian: Security Advisory (DLA-4154-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-20336

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the bpf Berkeley Packet Filter module. The issue arises due to the non-8-byte aligned storage of percpu...

Defending against Indirect Prompt Injection by Instruction Detection

The integration of Large Language Models LLMs with external sources is becoming increasingly common, with Retrieval-Augmented Generation RAG being a prominent example. However, this integration introduces vulnerabilities of Indirect Prompt Injection IPI attacks, where hidden instructions embedded...

QUIC-Exfil: Exploiting QUIC'S Server Preferred Address Feature to Perform Data Exfiltration Attacks

The QUIC protocol is now widely adopted by major tech companies and accounts for a significant fraction of today's Internet traffic. QUIC's multiplexing capabilities, encrypted headers, dynamic IP address changes, and encrypted parameter negotiations make the protocol not only more efficient,...

Ubuntu: Security Advisory (USN-7499-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7502-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-41431

creationtimestamp| type| source ---|---|--- 2025-05-07 22:22:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15442 2025-05-07 23:30:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomkcx24jxk2 2025-05-08 00:27:21+00:00| seen|...

CVE-2025-47462

creationtimestamp| type| source ---|---|--- 2025-05-07 21:39:09+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3lomec4lyv72q...

virt:rhel and virt-devel:rhel security update

An update is available for module.libvirt-dbus, swtpm, module.nbdkit, netcf, module.libiscsi, virt-v2v, libguestfs, module.virt-v2v, perl-Sys-Virt, module.supermin, sgabios, libvirt-dbus, module.netcf, libnbd, module.seabios, module.libvirt-python, hivex, seabios, module.sgabios,...

CVE-2025-47669

creationtimestamp| type| source ---|---|--- 2025-05-07 18:22:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15366 2025-05-07 18:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lolzkdwuiu2r 2025-05-07 19:00:51+00:00| seen|...

CVE-2025-47665

creationtimestamp| type| source ---|---|--- 2025-05-07 18:22:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15363 2025-05-07 18:27:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lolzkehz5l2w...

MAL-2025-3689 Malicious code in internal-lib-t1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0656cbf9afeeae51e03fe153910e1dad3a3840f219effb0583665acdfefb34ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-32397

creationtimestamp| type| source ---|---|--- 2025-05-07 07:22:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15278 2025-05-07 08:26:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokxykzgxm2w 2025-05-07 09:32:04+00:00| published-proof-of-concept|...

CVE-2025-32400

creationtimestamp| type| source ---|---|--- 2025-05-07 07:22:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15275 2025-05-07 08:26:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokxykw52r2h 2025-05-07 09:32:04+00:00| published-proof-of-concept|...

MAL-2025-3691 Malicious code in log-task (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 931fa544f576184bb148710757dc77752a974c0fc3d3e1f29f21a416e845c06b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3686 Malicious code in glance-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee4efe6d4c135136464de1f7b7b933c547869de8b71b6f645fedf3afbe4f5356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-3853

creationtimestamp| type| source ---|---|--- 2025-05-07 02:21:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15249 2025-05-07 04:26:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokkl3sjfo2l 2025-05-07 07:12:46+00:00| seen| https://t.me/cvedetector/24665...

FedRE: Robust and Effective Federated Learning with Privacy Preference

Despite Federated Learning FL employing gradient aggregation at the server for distributed training to prevent the privacy leakage of raw data, private information can still be divulged through the analysis of uploaded gradients from clients. Substantial efforts have been made to integrate local...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2025-1407)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7482-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...