Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-30973

Malicious code in bioql PyPI...

7.8CVSS6.5AI score0.00025EPSS
Exploits0References3
CNVD
CNVD
added 2025/09/28 12:0 a.m.2 views

NVIDIA Megatron-LM ensemble_classifer script code injection vulnerability

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. A code injection vulnerability exists in the NVIDIA Megatron-LM ensembleclassifer script, which can be exploited by attackers to cause code execution,...

7.8CVSS7.2AI score0.00025EPSS
Exploits0References1
OSV
OSV
added 2025/09/24 2:15 p.m.2 views

CVE-2025-23354

NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensembleclassifer script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data...

7.8CVSS7.2AI score0.00025EPSS
Exploits0References3
NVD
NVD
added 2025/09/24 2:15 p.m.1 views

CVE-2025-23354

NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensembleclassifer script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data...

7.8CVSS0.00025EPSS
Exploits0References3
Snyk
Snyk
added 2025/09/24 1:43 p.m.2 views

Arbitrary Code Injection

Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Arbitrary Code Injection via the ensembleclassifer script. An attacker can execute arbitrary code, escalate privileges, disclos...

8.5CVSS7.9AI score0.00025EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/24 1:14 p.m.1 views

CVE-2025-23354

NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensembleclassifer script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data...

7.8CVSS6.9AI score0.00025EPSS
Exploits0References3
CVE
CVE
added 2025/09/24 1:14 p.m.10 views

CVE-2025-23354

The CVE-2025-23354 issue affects NVIDIA Megatron-LM, specifically the ensemble_classifer script, with a code injection vulnerability that attacker-supplied data can trigger. The vulnerability may enable code execution, privilege escalation, information disclosure, and data tampering. Affected com...

7.8CVSS6.9AI score0.00025EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/09/24 1:14 p.m.3 views

CVE-2025-23354

NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensembleclassifer script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data...

7.8CVSS0.00025EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/09/24 12:0 a.m.1 views

NVIDIA Megatron-LM 代码注入漏洞

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. A code injection vulnerability exists in the NVIDIA Megatron-LM ensembleclassifer script, which can be exploited by attackers to cause code execution,...

7.8CVSS7.2AI score0.00025EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/09/24 12:0 a.m.2 views

PT-2025-39263

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron-LM affected versions not specified Description The software contains a flaw in the ensemble classifer script that could allow an attacker to inject malicious data. Successful exploitation of this issue may result in code...

7.8CVSS6.5AI score0.00025EPSS
Exploits0References6
Packet Storm News
Packet Storm News
added 2025/05/01 12:0 a.m.1 views

Zero-Day Botnet Attack Detection in IoV: a Modular Approach Using Isolation Forests and Particle Swarm Optimization

The Internet of Vehicles IoV is transforming transportation by enhancing connectivity and enabling autonomous driving. However, this increased interconnectivity introduces new security vulnerabilities. Bot malware and cyberattacks pose significant risks to Connected and Autonomous Vehicles CAVs, ...

7.5AI score
Exploits0
Rows per page
Query Builder