13665 matches found
FedPoisonTTP: A Threat Model and Poisoning Attack for Federated Test-Time Personalization
Test-time personalization in federated learning enables models at clients to adjust online to local domain shifts, enhancing robustness and personalization in deployment. Yet, existing federated learning work largely overlooks the security risks that arise when local adaptation occurs at test tim...
PT-2025-47975
Name of the Vulnerable Software and Affected Versions New API versions prior to 0.9.6 Description New API is a large language model LLM gateway and artificial intelligence AI asset management system. A Server-Side Request Forgery SSRF condition existed in versions prior to 0.9.6. A previous...
Accuracy and Efficiency Trade-Offs in LLM-Based Malware Detection and Explanation: A Comparative Study of Parameter Tuning Vs. Full Fine-Tuning
This study examines whether Low-Rank Adaptation LoRA fine-tuned Large Language Models LLMs can approximate the performance of fully fine-tuned models in generating human-interpretable decisions and explanations for malware classification. Achieving trustworthy malware detection, particularly when...
BASICS: Binary Analysis and Stack Integrity Checker System for Buffer Overflow Mitigation
Cyber-Physical Systems have played an essential role in our daily lives, providing critical services such as power and water, whose operability, availability, and reliability must be ensured. The C programming language, prevalent in CPS development, is crucial for system control where reliability...
MINI-88P4-V8V8-VV3X
Bulletin has no description...
CVE-2025-13547
CVE-2025-13547 affects D-Link DIR-822K and DWR-M920 routers (versions 1.00 20250513164613 through 1.1.50). The flaw is in the file /boafrm/formDdns, where manipulating the argument submit-url leads to memory corruption. The issue can be triggered remotely and an exploit has been published. Accord...
CGA-VHXR-H26V-5WP3
Bulletin has no description...
MINI-496W-PQGH-6CVF
Bulletin has no description...
CVE-2025-66093
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows DOM-Based XSS.This issue affects Extensions for Leaflet Map: from n/a through = 4.8...
RockyLinux 10 : thunderbird (RLSA-2025:21843)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:21843 advisory. firefox: Mitigation bypass in the DOM: Security component CVE-2025-13018 firefox: Use-after-free in the Audio/Video component CVE-2025-13014 firefox:...
MINI-Q2XX-G329-F65J
Bulletin has no description...
MINI-992P-PMPW-JMM3
Bulletin has no description...
EUVD-2025-198504
Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...
CVE-2025-48502
Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...
CVE-2025-48502
Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...
CVE-2025-48502
Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...
CVE-2025-48502
CVE-2025-48502 concerns the AMD μProf tool. Public documentation in multiple connected sources confirms an underlying issue of improper input validation within μProf, which can allow a local attacker to overwrite MSR registers. This action could lead to a crash or denial of service. The vulnerabi...
AI teddy bear for kids responds with sexual content and advice about weapons
In testing, FoloToy’s AI teddy bear jumped from friendly chat to sexual topics and unsafe household advice. It shows how easily artificial intelligence can cross serious boundaries. It’s a fair moment to ask whether AI-powered stuffed animals are appropriate for children. It’s easy to get swept u...
RLSA-2025:21843 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Mitigation bypass in the DOM: Security component CVE-2025-13018 firefox: Use-after-free in the Audio/Video component CVE-2025-13014 firefox: Incorrect boundary conditions in the JavaScript: WebAssembly compone...