CVE-2025-34095: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.execute code, which is then persisted on...

Amplifying Machine Learning Attacks through Strategic Compositions

Machine learning ML models are proving to be vulnerable to a variety of attacks that allow the adversary to learn sensitive information, cause mispredictions, and more. While these attacks have been extensively studied, current research predominantly focuses on analyzing each attack type...

Exploit for OS Command Injection in Wago Compact_Controller_100_Firmware

CVE-2023-1698 CVE-2023-1698 exploit with golang how t...

com.jeesuite:jeesuite-kafka (>=1.1.0, <=1.1.3), org.apache.kafka:kafka-examples (0.10.2.0) potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.10 (0.10.2.0)

org.apache.kafka:kafka2.10 MAVEN version 0.10.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kafka:kafka2.10 and may be impacted: - com.jeesuite:jeesuite-kafka =1.1.0, =1.1.3 - org.apache.kafka:kafka-examples 0.10.2.0 Source cves:...

com.github.intel-hadoop:gearpump-examples-kafka_2.11 (0.2), com.softwaremill:reactive-kafka_2.11 (>=0.1.0, <=0.2.0) potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.11 (0.8.2-beta)

org.apache.kafka:kafka2.11 MAVEN version 0.8.2-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kafka:kafka2.11 and may be impacted: - com.github.intel-hadoop:gearpump-examples-kafka2.11 0.2 - com.softwaremill:reactive-kafka2.11 =0.1.0,...

com.github.jm-lab:jmlab-utils-kafka (0.10.1), org.apache.kafka:kafka-examples (0.10.1.1) +1 more potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.10 (0.10.1.1)

org.apache.kafka:kafka2.10 MAVEN version 0.10.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kafka:kafka2.10 and may be impacted: - com.github.jm-lab:jmlab-utils-kafka 0.10.1 - org.apache.kafka:kafka-examples 0.10.1.1 -...

org.apache.inlong:manager-client (>=1.13.0, <=2.1.0), org.apache.inlong:manager-client-examples (>=1.13.0, <=2.1.0) +2 more potentially affected by CVE-2025-27522 via org.apache.inlong:manager-pojo (>=1.13.0, <=2.1.0)

org.apache.inlong:manager-pojo MAVEN version =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =2.1.0 Source cves: CVE-2025-27522 Source advisory: GHSA-R324-VGR5-73C9...

Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking

Impact Instances of HeavySelect2Mixin subclasses like the ModelSelect2MultipleWidget and ModelSelect2Widget can secret access tokens across requests. This can allow users to access restricted querysets and restricted data. Patches The problem has been patched in version 8.4.1 and all following...

CVE-2022-36022

Deeplearning4J is a suite of tools for deploying and training deep learning models using the JVM. Packages org.deeplearning4j:dl4j-examples and org.deeplearning4j:platform-tests through version 1.0.0-M2.1 may use some unclaimed S3 buckets in tests in examples. This is likely affect people who use...

batchkit-examples-speechsdk (0.9.1), stringlifier (>=0.1.0.0, <=0.1.0.9) potentially affected by CVE-2025-47273 via setuptools (46.0.0)

setuptools PYPI version 46.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - batchkit-examples-speechsdk 0.9.1 - stringlifier =0.1.0.0, =0.1.0.9 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

Malicious code in examples-formic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 074e879e97761583a22531a3d4f917977ac387e40c36bc5eb35e3f4b367db196 The OpenSSF Package Analysis project identified 'examples-formic' @ 100.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3951 Malicious code in examples-formic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 074e879e97761583a22531a3d4f917977ac387e40c36bc5eb35e3f4b367db196 The OpenSSF Package Analysis project identified 'examples-formic' @ 100.0.2 npm as malicious. It is considered malicious because: - The package...

batchkit-examples-speechsdk (0.9.1), stringlifier (>=0.1.0.0, <=0.1.0.9) potentially affected by CVE-2025-47273 via setuptools (46.0.0)

setuptools PYPI version 46.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - batchkit-examples-speechsdk 0.9.1 - stringlifier =0.1.0.0, =0.1.0.9 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

Malware in shader-examples

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

tomcat: Apache Tomcat: DoS in examples web application

A flaw was found in the "examples" web application of Apache Tomcat. Numerous examples within that application did not place limits on uploaded data. This vulnerability can potentially trigger an out-of-memory OOM error, leading to a denial of service...

Safety Analysis in the NGAC Model

We study the safety problem for the next-generation access control NGAC model. We show that under mild assumptions it is coNP-complete, and under further realistic assumptions we give an algorithm for the safety problem that significantly outperforms naive brute force search. We also show that...

CVE-2025-4001: DEPRECATED: Uncontrolled File Descriptor Consumption

A vulnerability has been found in scipopt scip up to 9.2.1 and classified as problematic. Affected by this vulnerability is the function main of the file examples/LOP/src/genRandomLOPInstance.c of the component File Descriptor Handler. The manipulation of the argument File leads to uncontrolled...

Towards Model Resistant to Transferable Adversarial Examples Via Trigger Activation

Whitepaper called Towards Model Resistant To Transferable Adversarial Examples Via Trigger Activation...

Q-FAKER: Query-Free Hard Black-Box Attack Via Controlled Generation

Many adversarial attack approaches are proposed to verify the vulnerability of language models. However, they require numerous queries and the information on the target model. Even black-box attack methods also require the target model's output information. They are not applicable in real-world...

org.apache.poi:poi-examples (3.7-beta2) potentially affected by CVE-2025-31672 via org.apache.poi:poi-ooxml (3.7-beta2)

org.apache.poi:poi-ooxml MAVEN version 3.7-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi-ooxml and may be impacted: - org.apache.poi:poi-examples 3.7-beta2 Source cves: CVE-2025-31672 Source advisory: OSV:GHSA-GMG8-593G-7MV3...