Grok apologizes for creating image of young girls in “sexualized attire”

Another AI system designed to be powerful and engaging ends up illustrating how guardrails routinely fail when development speed and feature races outrun safety controls. In a post on X, AI chatbot Grok confirmed that it generated an image of young girls in “sexualized attire.” The potential...

The vulnerability of NVIDIA DGX OS workstations’ operating system for DGX Spark GB10 artificial intelligence systems involves insecure privilege management. This vulnerability allows a malicious actor to trigger service failures, access and modify sensitive information.

The vulnerability of NVIDIA DGX OS workstations for DGX Spark GB10 artificial intelligence systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to cause service failures, disclose, and modify protected information...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the /api/v1/user endpoint returning different responses for failed authentication attempts depending on whether a username exists. An attacker can enumerate valid usernames by analyzing the variations in...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the /api/v1/user endpoint returning different responses for failed authentication attempts depending on whether a username exists. An attacker can enumerate valid usernames by analyzing the variations in...

The vulnerability of the microprogrammed software of the DVP-12SE11T controllers, related to writing outside the buffer boundaries, allows a intruder to disclose protected information and cause service failure.

The vulnerability of the microprogrammed software of the DVP-12SE11T controllers is related to writing outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose protected information and cause service failures...

The vulnerability of the Docker-proxy software lies in its inability to properly clean up or release resources, allowing a malicious actor to cause service failures.

The vulnerability of the Docker-proxy software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

CVE-2023-54275 wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Fix memory leak in ath11kpeerrxfragsetup cryptoallocshash allocates resources, which should be released by cryptofreeshash. When ath11kpeerfind fails, there has memory leak. Add missing cryptofreeshash to fix this...

Vulnerabilities of the functions mxc_isi_m2m_vb2_buffer_queue(), mxc_isi_m2m_vb2_stop_streaming(), and mxc_isi_m2m_s_fmt_vid() in the Linux operating system, allowing a hacker to trigger a service failure

The vulnerabilities of the functions mxcisim2mvb2bufferqueue, mxcisim2mvb2stopstreaming, and mxcisim2msfmtvid in the Linux operating system are related to state management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...

Vulnerabilities of the functions mxc_isi_m2m_vb2_buffer_queue(), mxc_isi_m2m_vb2_stop_streaming(), and mxc_isi_m2m_s_fmt_vid() in the Linux operating system, allowing a hacker to trigger a service failure

The vulnerabilities of the functions mxcisim2mvb2bufferqueue, mxcisim2mvb2stopstreaming, and mxcisim2msfmtvid in the Linux operating system are related to state management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...

The vulnerability of the python-jose library, related to incorrect processing of highly compressed input data, allows attackers to cause service failures.

The vulnerability of the python-jose library is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Checkpointing module in the NVIDIA Resiliency Extension (NVRx) toolset, which is designed to enhance the fault tolerance of large-scale distributed training systems. This vulnerability allows attackers to gain unauthorized access to protected information, replace data, enhance their privileges, or trigger service failures.

The vulnerability of the Checkpointing module in the NVIDIA Resiliency Extension NVRx toolset, which is designed to improve the fault tolerance of large-scale distributed training systems, is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow...

The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing lies in its deserialization mechanism flaws. This allows attackers to replace data, gain privileges, execute arbitrary code, or trigger service failures.

The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow attackers to replace data, gain enhanced...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from memory allocation failures that are not properly cleaned up, potentially leading to a memory leak...

The vulnerability of IBM WebSphere Application Server application servers, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the IBM WebSphere Application Server application server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2025-68338

In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Don't free uninitialized kszirq If something goes wrong at setup, kszirqfree can be called on uninitialized kszirq for example when kszptpirqsetup fails. It leads to freeing uninitialized IRQ numbers and/or...

UBUNTU-CVE-2025-68337

In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bugon in jbd2journalgetcreateaccess when file system corrupted There's issue when file system corrupted: ------------ cut here ------------ kernel BUG at fs/jbd2/transaction.c:1289! Oops: invalid opcode: 0000 1 SMP...

A Practical Solution to Systematically Monitor Inconsistencies in SBOM-Based Vulnerability Scanners

Software Bill of Materials SBOM provides new opportunities for automated vulnerability identification in software products. While the industry is adopting SBOM-based Vulnerability Scanning SVS to identify vulnerabilities, we increasingly observe inconsistencies and unexpected behavior, that resul...

SUSE CVE-2025-68290

In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures and on deregistration. This unsurprisingly leads to bugs in the MOST...

EulerOS Virtualization 2.13.0 : libssh (EulerOS-SA-2025-2584)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to...

EulerOS Virtualization 2.13.1 : libssh (EulerOS-SA-2025-2549)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to...