244 matches found
Automated Vulnerability Validation and Verification: A Large Language Model Approach
Software vulnerabilities remain a critical security challenge, providing entry points for attackers into enterprise networks. Despite advances in security practices, the lack of high-quality datasets capturing diverse exploit behavior limits effective vulnerability assessment and mitigation. This...
American Archive of Public Broadcasting allowed access to restricted media for years
A security flaw in the American Archive of Public Broadcasting AAPB website allowed unauthorized access to protected and private media, according to BleepingComputer. The American Archive of Public Broadcasting AAPB is a collaborative initiative between the Library of Congress and WGBH Educationa...
Exploit for CVE-2025-61546
vulnerability-disclosures Public disclosures of software vulne...
Wordfence Bug Bounty Program Monthly Report β August 2025
Last month in August 2025, the Wordfence Bug Bounty Program received 438 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence...
SUSE: Security Advisory (SUSE-SU-2025:03204-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
u42-vulnerability-disclosures
Palo Alto Networks - External Vulnerability...
Send to Which Account? Evaluation of an LLM-Based Scambaiting System
Scammers are increasingly harnessing generative AIGenAI technologies to produce convincing phishing content at scale, amplifying financial fraud and undermining public trust. While conventional defenses, such as detection algorithms, user training, and reactive takedown efforts remain important,...
Wordfence Bug Bounty Program Monthly Report β July 2025
Last month in July 2025, the Wordfence Bug Bounty Program received 325 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence...
security-research
security-research R...
EventHunter: Dynamic Clustering and Ranking of Security Events from Hacker Forum Discussions
Hacker forums provide critical early warning signals for emerging cybersecurity threats, but extracting actionable intelligence from their unstructured and noisy content remains a significant challenge. This paper presents an unsupervised framework that automatically detects, clusters, and...
CVE-advisories
CVE-advisor...
Multiparty Selective Disclosure Using Attribute-Based Encryption
This study proposes a mechanism for encrypting SD-JWT Selective Disclosure JSON Web Token Disclosures using Attribute-Based Encryption ABE to enable flexible access control on the basis of the Verifier's attributes. By integrating Ciphertext-Policy ABE CP-ABE into the existing SD-JWT framework, t...
Qilin Ransomware Ranked Highest in April 2025 with 72 Data Leak Disclosures
Threat actors with ties to the Qilin ransomware family have leveraged malware known as SmokeLoader along with a previously undocumented .NET compiled loader codenamed NETXLOADER as part of a campaign observed in November 2024. "NETXLOADER is a new .NET-based loader that plays a critical role in...
Decentralized Vulnerability Disclosure Via Permissioned Blockchain: a Secure, Transparent Alternative to Centralized CVE Management
This paper proposes a decentralized, blockchain-based system for the publication of Common Vulnerabilities and Exposures CVEs, aiming to mitigate the limitations of the current centralized model primarily overseen by MITRE. The proposed architecture leverages a permissioned blockchain, wherein on...
BIT-JOOMLA-2022-27911 [20220801] - Core - Multiple Full Path Disclosures because of missing '_JEXEC or die check'
An issue was discovered in Joomla! 4.2.0. Multiple Full Path Disclosures because of missing 'JEXEC or die check' caused by the PSR12 changes...
The vulnerability of the NTFS file system of the Windows operating system, which allows a perpetrator to disclose protected information
The vulnerability of the NTFS file system in Windows operating systems is related to the disclosure of password values in the log files. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these files...
GHSA-HW46-3HMR-X9XV
creationtimestamp| type| source ---|---|--- 2025-03-12 20:42:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7368 2025-03-12 20:42:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7376 2025-03-12 21:40:48+00:00| published-proof-of-concept|...
CVE-2022-1459
Non-Privilege User Can View Patientβs Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2025-21396
creationtimestamp| type| source ---|---|--- 2025-01-29 23:10:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113914167879704115 2025-01-29 23:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgw3z6parg2c 2025-01-30 01:11:55+00:00| seen|...
CVE-2022-25477
creationtimestamp| type| source ---|---|--- 2024-10-27 16:49:25+00:00| published-proof-of-concept| https://t.me/Rootsec2/4876 2024-10-28 13:32:54+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11344 2024-11-21 04:19:04+00:00| published-proof-of-concept|...