Linux Distros Unpatched Vulnerability : CVE-2023-53112

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/i915/sseu: fix maxsubslices array-index-out-of-bounds access It seems that commit...

Towards Effective Offensive Security LLM Agents: Hyperparameter Tuning, LLM As a Judge, and a Lightweight CTF Benchmark

Recent advances in LLM agentic systems have improved the automation of offensive security tasks, particularly for Capture the Flag CTF challenges. We systematically investigate the key factors that drive agent success and provide a detailed recipe for building effective LLM-based offensive securi...

Important: nvidia-modprobe

Issue Overview: NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or...

Amazon Linux 2023 : nvidia-open (ALAS2023NVIDIA-2025-132)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-132 advisory. NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A...

Malicious code in thisisthedaventest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c7f6701b95670bcfd620d23e4cc410957fb3cf0cc783ef0ab6d9f3ebe596ac8b Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in totallysafe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 772cdbb82e78ad30e8f4cb0bcdd45aaf61884da051a9998fd1c1431335d0eaf7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-41785 Malicious code in totallysafe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 772cdbb82e78ad30e8f4cb0bcdd45aaf61884da051a9998fd1c1431335d0eaf7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-41667 Malicious code in dsodelib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b3646fafa7dac849bdfcdc6c760d037132c5231f61a87721b2a433992a3d3639 Package is runs an Infostealer targeting telegram and Discord credentials. Depending on version, the infostealer is either downloaded from an URL or embedded i...

Malicious code in dsodelib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b3646fafa7dac849bdfcdc6c760d037132c5231f61a87721b2a433992a3d3639 Package is runs an Infostealer targeting telegram and Discord credentials. Depending on version, the infostealer is either downloaded from an URL or embedded i...

MAL-2025-41668 Malicious code in dziplib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4330efb5db5e6d840d35a3da3ca6f6ad39fadff7e37e78745b9e092d365a7ded Package is runs an Infostealer targeting telegram and Discord credentials. Depending on version, the infostealer is either downloaded from an URL or embedded i...

Malicious code in dziplib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4330efb5db5e6d840d35a3da3ca6f6ad39fadff7e37e78745b9e092d365a7ded Package is runs an Infostealer targeting telegram and Discord credentials. Depending on version, the infostealer is either downloaded from an URL or embedded i...

MAL-2025-41666 Malicious code in dsidelib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5bd949196aad0e516b6c21fb6c9fc50ac76f93ca87d94490d53e3b367401df7b Package is runs an Infostealer targeting telegram and Discord credentials. Depending on version, the infostealer is either downloaded from an URL or embedded i...

CVE-2025-8498

A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /cart/index.php. Such manipulation of the argument uname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly...

CVE-2025-23278

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this vulnerability might lead to data tampering or denial of service...

CVE-2025-23278

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this vulnerability might lead to data tampering or denial of service...

CVE-2025-23278

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this vulnerability might lead to data tampering or denial of service...

Malicious code in supersafepackage (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b979e1e2520c4f9d07507acc8182830203309adcb9932103a475d3e23e0de3f Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2025-41770 Malicious code in supersafepackage (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b979e1e2520c4f9d07507acc8182830203309adcb9932103a475d3e23e0de3f Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

Malicious code in tsesyx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7c8ea2b8c69693d4bd40c7c4b952878565e3bfaa6eb0ea02ab6ef9ca18eadea8 When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...

MAL-2025-41790 Malicious code in tsesyx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7c8ea2b8c69693d4bd40c7c4b952878565e3bfaa6eb0ea02ab6ef9ca18eadea8 When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...