2566 matches found
PT-2025-33812
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the eventpoll subsystem that could allow for semi-unbounded recursion. The issue stems from insufficient depth checks when creating graph edges...
PT-2025-33805 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue where the BPF JSET conditional jump is not correctly handled during control flow graph CFG computation. This can lead to incorrect live register and...
CVE-2025-53192
UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue, the OGNL engine parses and evaluates the provided expression with powerful capabilities...
VulnCheck KEV: CVE-2025-54782
Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution RCE vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API...
Linux Distros Unpatched Vulnerability : CVE-2024-12292
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab CE/EE affecting all versions starting from 11.0 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6...
Linux Distros Unpatched Vulnerability : CVE-2022-0152
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 13.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions...
Consiglieres in the Shadow: Understanding the Use of Uncensored Large Language Models in Cybercrimes
The advancement of AI technologies, particularly Large Language Models LLMs, has transformed computing while introducing new security and privacy risks. Prior research shows that cybercriminals are increasingly leveraging uncensored LLMs ULLMs as backends for malicious services. Understanding the...
VerilogLAVD: LLM-Aided Rule Generation for Vulnerability Detection in Verilog
Timely detection of hardware vulnerabilities during the early design stage is critical for reducing remediation costs. Existing early detection techniques often require specialized security expertise, limiting their usability. Recent efforts have explored the use of large language models LLMs for...
Beneath the Mask: Can Contribution Data Unveil Malicious Personas in Open-Source Projects?
In February 2024, after building trust over two years with project maintainers by making a significant volume of legitimate contributions, GitHub user "JiaT75" self-merged a version of the XZ Utils project containing a highly sophisticated, well-disguised backdoor targeting sshd processes running...
Linux Distros Unpatched Vulnerability : CVE-2024-4994
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 16.1.0 before 16.11.5, all versions starting from 17.0 before 17.0.3, all versions...
Exploit for CVE-2025-54253
CVE-2025-54253 Adobe AEM OGNL Injection Simulated PoC Lab !...
Malicious code in @zalastax/nolb-graph2 (npm)
The package @zalastax/nolb-graph2 was found to contain malicious code...
Malicious code in @zalastax/nolb-graph_ (npm)
The package @zalastax/nolb-graph was found to contain malicious code...
MAL-2025-11737 Malicious code in @zalastax/nolb-graph- (npm)
The package @zalastax/nolb-graph- was found to contain malicious code...
MAL-2025-11741 Malicious code in @zalastax/nolb-graph_ (npm)
The package @zalastax/nolb-graph was found to contain malicious code...
Malicious code in @zalastax/nolb-graphql-g (npm)
The package @zalastax/nolb-graphql-g was found to contain malicious code...
MAL-2025-9142 Malicious code in @omisepayments/in-app-communication-graphql-sdk (npm)
The package @omisepayments/in-app-communication-graphql-sdk was found to contain malicious code...
MAL-2025-26277 Malicious code in mg-graph (npm)
The package mg-graph was found to contain malicious code...