2349 matches found
KillChainGraph: ML Framework for Predicting and Mapping ATT&CK Techniques
The escalating complexity and volume of cyberattacks demand proactive detection strategies that go beyond traditional rule-based systems. This paper presents a phase-aware, multi-model machine learning framework that emulates adversarial behavior across the seven phases of the Cyber Kill Chain...
CVE-2025-53192
UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue, the OGNL engine parses and evaluates the provided expression with powerful capabilities...
VulnCheck KEV: CVE-2025-54782
Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution RCE vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API...
Beneath the Mask: Can Contribution Data Unveil Malicious Personas in Open-Source Projects?
In February 2024, after building trust over two years with project maintainers by making a significant volume of legitimate contributions, GitHub user "JiaT75" self-merged a version of the XZ Utils project containing a highly sophisticated, well-disguised backdoor targeting sshd processes running...
Consiglieres in the Shadow: Understanding the Use of Uncensored Large Language Models in Cybercrimes
The advancement of AI technologies, particularly Large Language Models LLMs, has transformed computing while introducing new security and privacy risks. Prior research shows that cybercriminals are increasingly leveraging uncensored LLMs ULLMs as backends for malicious services. Understanding the...
VerilogLAVD: LLM-Aided Rule Generation for Vulnerability Detection in Verilog
Timely detection of hardware vulnerabilities during the early design stage is critical for reducing remediation costs. Existing early detection techniques often require specialized security expertise, limiting their usability. Recent efforts have explored the use of large language models LLMs for...
Linux Distros Unpatched Vulnerability : CVE-2024-12292
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab CE/EE affecting all versions starting from 11.0 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6...
Linux Distros Unpatched Vulnerability : CVE-2024-4994
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 16.1.0 before 16.11.5, all versions starting from 17.0 before 17.0.3, all versions...
Linux Distros Unpatched Vulnerability : CVE-2022-0152
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 13.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions...
Exploit for CVE-2025-54253
CVE-2025-54253 Adobe AEM OGNL Injection Simulated PoC Lab !...
MAL-2025-11741 Malicious code in @zalastax/nolb-graph_ (npm)
The package @zalastax/nolb-graph was found to contain malicious code...
MAL-2025-9142 Malicious code in @omisepayments/in-app-communication-graphql-sdk (npm)
The package @omisepayments/in-app-communication-graphql-sdk was found to contain malicious code...
Malicious code in @zalastax/nolb-graph- (npm)
The package @zalastax/nolb-graph- was found to contain malicious code...
Malicious code in @zalastax/nolb-graph2 (npm)
The package @zalastax/nolb-graph2 was found to contain malicious code...
Malicious code in @zalastax/nolb-graph_ (npm)
The package @zalastax/nolb-graph was found to contain malicious code...
Malicious code in @zalastax/nolb-graphql-g (npm)
The package @zalastax/nolb-graphql-g was found to contain malicious code...
Malicious code in mg-graph (npm)
The package mg-graph was found to contain malicious code...
Malicious code in test-mlw2-sprew-chief-rybat-graph (npm)
The package test-mlw2-sprew-chief-rybat-graph was found to contain malicious code...
MAL-2025-36321 Malicious code in test-mlw2-sprew-chief-rybat-graph (npm)
The package test-mlw2-sprew-chief-rybat-graph was found to contain malicious code...
MAL-2025-26277 Malicious code in mg-graph (npm)
The package mg-graph was found to contain malicious code...