CVE-2025-11257: Missing Authorization

The LLM Hubspot Blog Import plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'processsaveblogs' AJAX endpoint in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with Subscriber-level acce...

fair-llm (>=0.2.0, <=0.6.2), geo-importer (>=0.0.1b1, <=0.0.1b914) +4 more potentially affected by CVE-2025-62708 via pypdf (5.6.0)

pypdf PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - fair-llm =0.2.0, =0.0.1b1, =30.0.5, =30.0.7 - textspitter 0.4.0b0 Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...

fair-llm (>=0.2.0, <=0.6.2), geo-importer (>=0.0.1b1, <=0.0.1b914) +4 more potentially affected by CVE-2025-62707 via pypdf (5.6.0)

pypdf PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - fair-llm =0.2.0, =0.0.1b1, =30.0.5, =30.0.7 - textspitter 0.4.0b0 Source cves: CVE-2025-62707 Source advisory: OSV:GHSA-VR63-X8VC-M265...

The Trust Paradox in LLM-Based Multi-Agent Systems: When Collaboration Becomes a Security Vulnerability

Multi-agent systems powered by large language models are advancing rapidly, yet the tension between mutual trust and security remains underexplored. We introduce and empirically validate the Trust-Vulnerability Paradox TVP: increasing inter-agent trust to enhance coordination simultaneously expan...

Flowise security vulnerabilities

Flowise is a FlowiseAI open source tool for easily building LLM applications. A security vulnerability exists in Flowise versions prior to 3.0.5 that stems from an unfiltered IFRAME element and could lead to a cross-site scripting attack...

EUVD-2023-58116

Malicious code in bioql PyPI...

EUVD-2025-11837

Malicious code in bioql PyPI...

EUVD-2025-22316

Malicious code in bioql PyPI...

EUVD-2025-28744

Malicious code in bioql PyPI...

EUVD-2024-2367

Malicious code in bioql PyPI...

EUVD-2025-6100

Malicious code in bioql PyPI...

EUVD-2022-54642

Malicious code in bioql PyPI...

EUVD-2025-11357

Malicious code in bioql PyPI...

EUVD-2024-1292

Malicious code in bioql PyPI...

EUVD-2023-54737

Malicious code in bioql PyPI...

EUVD-2024-31707

Malicious code in bioql PyPI...

EUVD-2025-10934

Malicious code in bioql PyPI...

EUVD-2025-13062

Malicious code in bioql PyPI...

EUVD-2023-54736

Malicious code in bioql PyPI...

Researchers Uncover GPT-4-Powered MalTerminal Malware Creating Ransomware, Reverse Shell

Cybersecurity researchers have discovered what they say is the earliest example known to date of a malware that bakes in Large Language Model LLM capabilities. The malware has been codenamed MalTerminal by SentinelOne SentinelLABS research team. The findings were presented at the LABScon 2025...