collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +22 more potentially affected by CVE-2025-33248 via megatron-core (>=0.2.0, <=0.15.2)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =0.4.2, =1.0.0, =1.0.0, =5.0.7 and more Source cves: CVE-2025-33248 Source advisory: SNYK:PYTHON-MEGATRONCORE-15871032...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +22 more potentially affected by CVE-2026-24150 via megatron-core (>=0.2.0, <=0.15.2)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =0.4.2, =1.0.0, =1.0.0, =5.0.7 and more Source cves: CVE-2026-24150 Source advisory: SNYK:PYTHON-MEGATRONCORE-15871033...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +22 more potentially affected by CVE-2026-24152 via megatron-core (>=0.2.0, <=0.15.2)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =0.4.2, =1.0.0, =1.0.0, =5.0.7 and more Source cves: CVE-2026-24152 Source advisory: SNYK:PYTHON-MEGATRONCORE-15871035...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +22 more potentially affected by CVE-2025-23357 via megatron-core (>=0.2.0, <=0.14.0rc7)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.2.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =0.4.2, =1.0.0, =1.0.0, =5.0.7 and more Source cves: CVE-2025-23357 Source advisory: SNYK:PYTHON-MEGATRONCORE-13901364...

collie-lm (>=1.0.5, <=1.0.7), frankenstein-model (>=5.1.6, <=5.3.9) +13 more potentially affected by CVE-2025-23348 via megatron-core (>=0.2.0, <=0.10.0)

megatron-core PYPI version =0.2.0, =1.0.5, =5.1.6, =0.1.0, =0.1.0, =1.0.0, =2.0.8, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.4.9 Source cves: CVE-2025-23348 Source advisory: SNYK:PYTHON-MEGATRONCORE-13110024...

collie-lm (>=1.0.5, <=1.0.7), frankenstein-model (>=5.1.6, <=5.3.9) +13 more potentially affected by CVE-2025-23354 via megatron-core (>=0.2.0, <=0.10.0)

megatron-core PYPI version =0.2.0, =1.0.5, =5.1.6, =0.1.0, =0.1.0, =1.0.0, =2.0.8, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.4.9 Source cves: CVE-2025-23354 Source advisory: SNYK:PYTHON-MEGATRONCORE-13110088...

collie-lm (>=1.0.5, <=1.0.7), frankenstein-model (>=5.1.6, <=5.3.9) +13 more potentially affected by CVE-2025-23353 via megatron-core (>=0.2.0, <=0.10.0)

megatron-core PYPI version =0.2.0, =1.0.5, =5.1.6, =0.1.0, =0.1.0, =1.0.0, =2.0.8, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.4.9 Source cves: CVE-2025-23353 Source advisory: MEND:CVE-2025-23353...

collie-lm (>=1.0.5, <=1.0.7), frankenstein-model (>=5.1.6, <=5.3.9) +13 more potentially affected by CVE-2025-23306 via megatron-core (>=0.2.0, <=0.10.0)

megatron-core PYPI version =0.2.0, =1.0.5, =5.1.6, =0.1.0, =0.1.0, =1.0.0, =2.0.8, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.4.9 Source cves: CVE-2025-23306 Source advisory: MEND:CVE-2025-23306...

CVE-2024-10573

An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The complexity required to exploit this flaw is...

frankenstein

This is a Python-based framework called Frankenstein, designed to provide a virtual environment for fuzzing wireless firmwares. The framework is currently optimized for the CYW20735 Bluetooth evaluation board but also supports the CYW20819A1 evaluation board. The framework allows users to attach ...

frankenstein

Frankenstein provides a virt...

Threat Source newsletter (June 6)

Newsletter compiled by Jonathan Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. We hope to see everyone this weekend at the Talos Threat Research Summit in San Diego or throughout the week at Cisco Live. If you’...

It's alive: Threat actors cobble together open-source pieces into monstrous Frankenstein campaign

This blog was authored by Danny Adamitis, David Maynor and Kendall McKay. Executive summary Cisco Talos recently identified a series of documents that we believe are part of a coordinated series of cyber attacks that we are calling the "Frankenstein" campaign. We assess that the attackers carried...

Hackers Are Passing Around a Megaleak of 2.2 Billion Records

The so-called Collections 1-5 represent a gargantuan, patched-together Frankenstein of rotting personal data...

Services - Critical - SQL Injection - SA-CONTRIB-2017-054

This module provides a standardized solution for building API's so that external clients can communicate with Drupal. The module doesn't sufficiently sanitize column names provided by the client when they are querying for data and trying to sort it. This vulnerability is mitigated by the fact tha...

Frankenstein Malware turning legitimate software into invisible malware

Many malware and viruses can be identified by detection software because of known bits of malicious code. But what if there was a virus compiled from little bits of programs you already had installed? That's just what two security researchers are looking into. Frankenstein or The Modern Prometheu...