13718 matches found
CVE-2025-49433
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThanhD Supermalink supermalink allows DOM-Based XSS.This issue affects Supermalink: from n/a through = 1.1...
CVE-2025-54706
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Magical Posts Display magical-posts-display allows DOM-Based XSS.This issue affects Magical Posts Display: from n/a through = 1.2.52...
CVE-2025-38518 x86/CPU/AMD: Disable INVLPGB on Zen2
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skillfish Family 17h, Model 47h, Stepping 0h has an issue that causes system oopses and panics when performing TLB flush using INVLPGB. However, the problem is that that machine has...
Mitigating Jailbreaks with Intent-Aware LLMs
Despite extensive safety-tuning, large language models LLMs remain vulnerable to jailbreak attacks via adversarially crafted instructions, reflecting a persistent trade-off between safety and task performance. In this work, we propose Intent-FT, a simple and lightweight fine-tuning approach that...
Exploit for CVE-2024-3660
CVE-2024-3660 – TensorFlow Keras Arbitrary Code Execution via...
CVE-2025-49898
CVE-2025-49898 refers to a DOM-based XSS in the WordPress plugin Dropshix (Dropshix
MINI-M62G-76R7-254G
Bulletin has no description...
CVE-2025-26709
CVE-2025-26709 affects ZTE F50 with an unauthorized access vulnerability due to improper permission control in the Web module interface. The root cause is insufficient access controls, allowing an attacker with adjacent access and low exploit complexity to obtain sensitive information via the Web...
CVE-2025-8451
CVE-2025-8451 — The WordPress plugin Essential Addons for Elementor – Popular Elementor Templates & Widgets (Essential Addons for Elementor Lite) is vulnerable to a DOM-based Stored XSS via the data-gallery-items parameter in all versions up to and including 6.2.2. The issue arises from insuffici...
Exploit for CVE-2025-50461
CVE-2025-50461: Remote Code Execution via Unsafe Model Deseria...
Ollama <= 0.3.3 DoS
The version of Ollama installed on the remote host is prior or equal to 0.3.3. It is, therefore, affected by a vulnerability. A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the...
Linux Distros Unpatched Vulnerability : CVE-2025-37812
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: cdns3: Fix deadlock when using NCM gadget The cdns3 driver has the same NCM deadlock as fixed in cdnsp by commit 58f2fcb3a845 usb: cdnsp: Fix deadlock issu...
Linux Distros Unpatched Vulnerability : CVE-2021-46977
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Disable preemption when probing user return MSRs Disable preemption when probing a...
Malicious code in screwdriver-data-model (npm)
The package screwdriver-data-model was found to contain malicious code...
Malicious code in semio-lever-model (npm)
The package semio-lever-model was found to contain malicious code...
Malicious code in key_value_model (npm)
The package keyvaluemodel was found to contain malicious code...
Malicious code in ic-model-admin (npm)
The package ic-model-admin was found to contain malicious code...
MAL-2025-22882 Malicious code in ic-model-admin (npm)
The package ic-model-admin was found to contain malicious code...