131 matches found
WordPress Epsilon Framework Themes <=2.4.8 - Remote Code Execution
WordPress themes including Shapely = 1.2.7, NewsMag = 2.4.1, Activello = 1.4.0, Illdy = 2.1.4, Allegiant = 1.2.2, Newspaper X = 1.3.1, Pixova Lite = 2.0.5, Brilliance = 1.2.7, MedZone Lite = 1.2.4, Regina Lite = 2.0.4, Transcend = 1.1.8, Affluent = 1.1.0, Bonkers = 1.0.4, Antreas = 1.0.2, Sparkli...
CVE-2026-43928 FOSSBilling: Payment amount not validated in PayPalEmail adapter allows invoice underpayment
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the PayPalEmail payment adapter accepts PayPal IPN callbacks and credits the IPN-supplied amount mcgross to the client's balance without validating it against the invoice total. Combined with a $0.05...
CVE-2026-43928 FOSSBilling: Payment amount not validated in PayPalEmail adapter allows invoice underpayment
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the PayPalEmail payment adapter accepts PayPal IPN callbacks and credits the IPN-supplied amount mcgross to the client's balance without validating it against the invoice total. Combined with a $0.05...
Malicious Package
Overview faster-axios is a malicious package. This package contains malicious code associated with the Epsilon Stealer malware campaign. While this package attempts to impersonate a legitimate performance-enhanced version of the axios HTTP client, there is no connection between the axios project ...
Malicious Package
Overview turbo-axios is a malicious package. This package contains malicious code associated with the Epsilon Stealer malware campaign. While this package attempts to impersonate a legitimate performance-enhanced version of the axios HTTP client, there is no connection between the axios project o...
Evaluating Differential Privacy against Membership Inference in Federated Learning: Insights from the NIST Genomics Red Team Challenge
While Federated Learning FL mitigates direct data exposure, the resulting trained models remain susceptible to membership inference attacks MIAs. This paper presents an empirical evaluation of Differential Privacy DP as a defense mechanism against MIAs in FL, leveraging the environment of the 202...
Optimizing Epsilon Security Parameters in QKD
We investigate the optimization of epsilon-security parameters in quantum key distribution QKD, aiming to improve the achievable secure key rate under a fixed overall composable security level. For this purpose, we employ a continuous genetic algorithm CGA to optimize the epsilon-security...
EUVD-2025-179218
Malicious code in earth-omega-epsilon-error-compress npm...
EUVD-2025-179094
Malicious code in epsilon-beta-key-double-assert npm...
EUVD-2025-179089
Malicious code in epsilon-web-sun-test-easy npm...
EUVD-2025-176758
Malicious code in refactor-cat-epsilon-interface-monitor npm...
EUVD-2025-180439
Malicious code in analyze-boolean-pipe-import-epsilon npm...
EUVD-2025-179686
Malicious code in cold-bad-theta-epsilon-route npm...
EUVD-2025-175786
Malicious code in upsilon-catch-new-epsilon-unix npm...
EUVD-2025-175402
Malicious code in zero-epsilon-bash-cache-query npm...
Malicious code in upsilon-fast-epsilon-optimize-interface (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d653fcaa0c2e1a74b8bf8126b95ed3b9284be21d307f766a0df8c77a468db28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180487
Malicious code in air-epsilon-zeta-key-bundle npm...
EUVD-2025-176213
Malicious code in static-stub-dog-epsilon-final npm...