Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' through the use of template functions env and expandenv, which are enabled by default. An attacker can extract sensitive system data,...

The vulnerability of SiPass integrated software for security and access control systems lies in the lack of authentication for a critical function, allowing attackers to gain unauthorized access to confidential data.

The vulnerability of SiPass integrated software for security and access control systems is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to confidential data...

IF-GUIDE: Influence Function-Guided Detoxification of LLMs

We study how training data contributes to the emergence of toxic behaviors in large-language models. Most prior work on reducing model toxicity adopts $reactive$ approaches, such as fine-tuning pre-trained and potentially toxic models to align them with human values. In contrast, we propose a...

CVE-2025-5192

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions...

D2R: Dual Regularization Loss with Collaborative Adversarial Generation for Model Robustness

The robustness of Deep Neural Network models is crucial for defending models against adversarial attacks. Recent defense methods have employed collaborative learning frameworks to enhance model robustness. Two key limitations of existing methods are i insufficient guidance of the target model via...

CVE-2025-5192 Soar Cloud HRD Human Resource Management System - Missing Authentication for Critical Function

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions...

CVE-2025-5695

A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. This impacts the function subscribetospot/subscribetodelta/subscribetoalarm of the file /usr/www/application/models/subscriptions.php of the component Backend. Such manipulation leads to command injection. It is possible to launch...

GHSA-PR59-JJR4-GCF6 anon-vec lacks sufficient checks in public API

The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: - AnonVec::getref - AnonVec::getmut - AnonVec::removeget The crate was built as a learning project and is not being maintained...

anon-vec lacks sufficient checks in public API

The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: - AnonVec::getref - AnonVec::getmut - AnonVec::removeget The crate was built as a learning project and is not being maintained...

PT-2025-25491 · Crates.Io · Anon-Vec

The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: - AnonVec::get ref - AnonVec::get mut - AnonVec::remove get The crate was built as a learning project and is not being maintained...

The vulnerability of the JetBrains YouTrack project and task management software interface allows a hacker to gain read, edit, and delete access to data.

The vulnerability of the JetBrains YouTrack project and task management software interface lies in the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to gain read, edit, and delete access to data...

CVE-2025-5520 Open5GS AMF/MME emm_state_authentication assertion

A vulnerability was found in Open5GS up to 2.7.3. It has been classified as problematic. Affected is the function gmmstateauthentication/emmstateauthentication of the component AMF/MME. The manipulation leads to reachable assertion. It is possible to launch the attack remotely. The exploit has be...

The vulnerability in the template.cgi web interface of the Meteobridge software allows a perpetrator to bypass security restrictions, gain elevated privileges, and execute arbitrary commands.

The vulnerability of the template.cgi web interface of the Meteobridge software lies in the lack of authentication for critical functions, due to insufficient filtering of special elements. Exploiting this vulnerability allows a malicious actor to bypass security restrictions, gain increased...

Vulnerabilities of the functions isotp_rcv_echo(), isotp_tx_timer_handler(), isotp_release(), and isotp_init() in the Linux operating system, allowing a hacker to cause a service failure

The vulnerabilities of the functions isotprcvecho, isotptxtimerhandler, isotprelease, and isotpinit in the Linux operating system are related to resource management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...

CVE-2025-48746

Netwrix Directory Manager formerly Imanami GroupID v.11.0.0.0 and before, as well as after v.11.1.25134.03 lacks Authentication for a Critical Function...

CLSA-2025-1748464675 git: Fix of CVE-2024-32004

CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions...

Vulnerabilities in functions imx8mq_soc_revision_from_atf(), imx8mq_soc_revision(), imx8mm Soc UID(), kasprintf(), imx8_soc_init(), and kfree() of the drivers/soc/imx/soc-imx8m.c module of the Linux kernel, which allows an attacker to cause a system failure.

The vulnerabilities of the functions imx8mqsocrevisionfromatf, imx8mqsocrevision, imx8mm Soc UID, kasprintf, imx8socinit, and kfree in the soc/imx/soc-imx8m.c module of the Linux kernel are related to resource management errors. Exploiting these vulnerabilities can allow an attacker to cause syst...

Netwrix Directory Manager 安全漏洞

Netwrix Directory Manager is a group and user management software from Netwrix. A security vulnerability exists in Netwrix Directory Manager v.11.0.0.0 and prior and subsequent v.11.1.25134.03 versions, which stems from a lack of authentication for critical functions...

Fortinet FortiOS 访问控制错误漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. An access control error...

CVE-2025-32440

NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to...