12458 matches found
Malicious code in okta-ui-private-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9cde1163c4cd1320ef67a954307e5ac2fdf19ea7925c9b0cd032910b171e6e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Oracle Database Server 安全漏洞
Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in the Java VM of Oracle Database Server, which can be...
BandFuzz: an ML-Powered Collaborative Fuzzing Framework
Collaborative fuzzing has recently emerged as a technique that combines multiple individual fuzzers and dynamically chooses the appropriate combinations suited for different programs. Unlike individual fuzzers, which rely on specific assumptions to maintain their effectiveness, collaborative...
Reporte De Vulnerabilidades En IIoT. Proyecto DEFENDER
The main objective of this technical report is to conduct a comprehensive study on devices operating within Industrial Internet of Things IIoT environments, describing the scenarios that define this category and analysing the vulnerabilities that compromise their security. To this end, the report...
DNS Tunneling: Threat Landscape and Improved Detection Solutions
Detecting Domain Name System DNS tunneling is a significant challenge in security due to its capacity to hide harmful actions within DNS traffic that appears to be normal and legitimate. Traditional detection methods are based on rule-based approaches or signature matching methods that are often...
CVE-2025-1384
CVE-2025-1384 affects Omron NJ/NX-series Machine Automation Controllers and Sysmac Studio Software. The issue is a Least Privilege Violation (CWE-272) in the communications function between these products, allowing a remote attacker to gain unauthorized access and potentially execute arbitrary co...
[SECURITY] Fedora 42 Update: luajit-2.1.1748459687-2.fc42
LuaJIT implements the full set of language features defined by Lua 5.1. The virtual machine VM is API- and ABI-compatible to the standard Lua interpreter and can be deployed as a drop-in replacement...
LLMalMorph: on the Feasibility of Generating Variant Malware Using Large-Language-Models
Large Language Models LLMs have transformed software development and automated code generation. Motivated by these advancements, this paper explores the feasibility of LLMs in modifying malware source code to generate variants. We introduce LLMalMorph, a semi-automated framework that leverages...
CVE-2025-52983
A UI Discrepancy for Security Feature vulnerability in the UI of Juniper Networks Junos OS on VM Host systems allows a network-based, unauthenticated attacker to access the device. On VM Host Routing Engines RE, even if the configured public key for root has been removed, remote users which are i...
KVM: arm64: Tear down vGIC on failed vCPU creation
...
KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
...
KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
...
atm: Fix NULL pointer dereference
...
KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
...
KVM: x86: Reset IRTE to host control if *new* route isn't postable
...
x86/mce: use is_copy_from_user() to determine copy-from-user context
...
Entangled Threats: a Unified Kill Chain Model for Quantum Machine Learning Security
Quantum Machine Learning QML systems inherit vulnerabilities from classical machine learning while introducing new attack surfaces rooted in the physical and algorithmic layers of quantum computing. Despite a growing body of research on individual attack vectors - ranging from adversarial poisoni...
SUSE CVE-2025-38309
In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: move xesvminit earlier In xevmcloseandput we need to be able to call xesvmfini, however during vm creation we can call this on the error path, before having actually initialised the svm state, leading to various splats...
Malicious code in jquery-zoomer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acbf4e3c76ef6d0551f9bcc3420755fcabf7d985871c714a3ea7cfdcb43a6d94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
