RobPI: Robust Private Inference against Malicious Client

The increased deployment of machine learning inference in various applications has sparked privacy concerns. In response, private inference PI protocols have been created to allow parties to perform inference without revealing their sensitive data. Despite recent advances in the efficiency of PI,...

CBL Mariner 2.0 Security Update: CBL-Mariner Releases (CVE-2025-10158)

The version of CBL-Mariner Releases installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-10158 advisory. - A malicious client acting as the receiver of an rsync file transfer can trigger an out of boun...

AZL-70667 CVE-2025-10158 affecting package rsync for versions less than 3.4.1-2

A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue...

CVE-2025-10158

A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue...

EUVD-2020-18363

Malware in sbrugna...

EUVD-2020-25302

Malware in sbrugna...

EUVD-2018-0594

Malware in sbrugna...

EUVD-2020-3406

Malware in sbrugna...

EUVD-2019-2959

Malware in sbrugna...

EUVD-2017-6585

Malware in sbrugna...

EUVD-2024-54803

Malicious code in bioql PyPI...

EUVD-2022-29571

Malicious code in bioql PyPI...

EUVD-2025-25419

Malicious code in bioql PyPI...

EUVD-2022-5730

Malicious code in bioql PyPI...

CVE-2025-7390

A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication...

CVE-2025-7390 Bypass the client certificate trust check of an opc.https server while only secure communication is allowed

A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication...

CVE-2025-7390

A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication...

CVE-2025-7390

CVE-2025-7390 describes a bypass of the client certificate trust check in an opc.https server when the endpoint is configured to allow only secure communication. Connected sources indicate affected software/product context primarily around OPC.https servers (e.g., Softing edgeConnector) and Red H...

Softing Industrial Automation edgeConnector 安全漏洞

Softing Industrial Automation edgeConnector is a cloud linking software from Softing Industrial Automation, Germany. A security vulnerability exists in Softing Industrial Automation edgeConnector that originates from a malicious client that can bypass client certificate trust checks...

GitProxy Hidden Commits Injection

Summary An attacker can inject extra commits into the pack sent to GitHub, commits that aren’t pointed to by any branch. Although these “hidden” commits never show up in the repository’s visible history, GitHub still serves them at their direct commit URLs. This lets an attacker exfiltrate...